Re: session.use_trans_sid Question
| From: | Jason Barnett | Date: | Wed, 16 Mar 2005 20:03:11 +0000 |
| Subject: | Re: session.use_trans_sid Question | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-210917@lists.php.net to get a copy of this message | ||
Al wrote:
> What are the pros and cons of session.use_trans_sid ON and OFF
>
> Just moved our site from one which had the php.ini,
> session.use_trans_sid=OFF to one with it ON
>
> Sure looks ugly having the PHPSESSID showing up for visitors.
>
> Thanks
PRO:
- makes life easier when session cookie isn't an option
CON:
- disables implicit flush for output buffering
- increased risk of session fixation
Others?
--
Teach a man to fish...
NEW? | http://www.catb.org/~esr/faqs/smart-questions.html
STFA | http://marc.theaimsgroup.com/?l=php-general&w=2
STFM | http://php.net/manual/en/index.php
STFW | http://www.google.com/search?q=php
LAZY |
http://mycroft.mozdev.org/download.html?name=PHP&submitform=Find+search+plugins
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc