RE: [PHP] Sessions Without Cookies or SID Passing...

Could you explain how this could be accomplished, because I'm not understanding how to do it. As I understand HTTP Authentication (correct me if I'm wrong), the user's computer still has to send a 'username/password' pair to perform the authentication. I can't see how this could be used to maintain session data. But maybe my mind is just trapped in a rut. Please enlighten me. Matthew Walker Senior Software Engineer ePliant Marketing -----Original Message----- From: Rasmus Lerdorf [mailto:rasmus@php.net] Sent: Tuesday, May 14, 2002 6:04 PM To: Matthew Walker Cc: php-general@lists.php.net Subject: RE: [PHP] Sessions Without Cookies or SID Passing... I am understanding the problem perfectly. HTTP is stateless. You want to maintain state accross requests. This is done in 3 different ways. 1. Cookies 2. URL Mangling 3. HTTP Authentication You said you did not want to do 1 or 2. That only leaves you with HTTP Authentication. HTTP Authentication is really just like a cookie that can't be disabled when it comes down to it. -Rasmus On Tue, 14 May 2002, Matthew Walker wrote: > You're not understanding the problem. This is not an authentication > situation. We are using sessions to track information about what a > customer's OrderID is, and other related information. > > Matthew Walker > Senior Software Engineer > ePliant Marketing > > > -----Original Message----- > From: Rasmus Lerdorf [mailto:rasmus@php.net] > Sent: Tuesday, May 14, 2002 5:42 PM > To: Matthew Walker > Cc: php-general@lists.php.net > Subject: Re: [PHP] Sessions Without Cookies or SID Passing... > > Use standard HTTP authentication over SSL - that's the only other way. > > On Tue, 14 May 2002, Matthew Walker wrote: > > > We have a shopping cart product we're developing in PHP, and I've > > recently come across I dilemma that I need to find a reliable solution > > to. > > > > Many of the people who will be shopping on our sites have cookies > > disabled, which presents a problem when using sessions. Now, I am > aware > > of the fact that we could append the SID constant to every URL, but > this > > will not work for us. None of our sites are dynamic, and updating them > > is out of the question (We have over 100 sites). As well, someday we > > intend to sell this software, and we don't want to require that people > > make their sites fully dynamic to accommodate it. > > > > So, is there any reliable way to emulate sessions without requiring a > > cookie, or a variable passed in every URL? > > > > Matthew Walker > > Senior Software Engineer > > ePliant Marketing > > > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 > > --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002