RE: [PHP] Sessions Without Cookies or SID Passing...

No, it doesn't work at all. All sorts of people are behind proxies. Every AOL user, for example. All these people end up showing up as the same, or at least one of a pool of a few dozen ips. If you use this methods millions of users will end up sharing the same shopping cart. That's probably not a good idea. -Rasmus On Wed, 15 May 2002, Martin Towell wrote: > You're missing one method - using the user's IP address > It's not a guaranteed fool-proof method, but if you don't want to use > cookies or the URL, then this sorta works. > > -----Original Message----- > From: Rasmus Lerdorf [mailto:rasmus@php.net] > Sent: Wednesday, May 15, 2002 10:04 AM > To: Matthew Walker > Cc: php-general@lists.php.net > Subject: RE: [PHP] Sessions Without Cookies or SID Passing... > > > I am understanding the problem perfectly. HTTP is stateless. You want to > maintain state accross requests. This is done in 3 different ways. > > 1. Cookies > 2. URL Mangling > 3. HTTP Authentication > > You said you did not want to do 1 or 2. That only leaves you with HTTP > Authentication. HTTP Authentication is really just like a cookie that > can't be disabled when it comes down to it. > > -Rasmus > > On Tue, 14 May 2002, Matthew Walker wrote: > > > You're not understanding the problem. This is not an authentication > > situation. We are using sessions to track information about what a > > customer's OrderID is, and other related information. > > > > Matthew Walker > > Senior Software Engineer > > ePliant Marketing > > > > > > -----Original Message----- > > From: Rasmus Lerdorf [mailto:rasmus@php.net] > > Sent: Tuesday, May 14, 2002 5:42 PM > > To: Matthew Walker > > Cc: php-general@lists.php.net > > Subject: Re: [PHP] Sessions Without Cookies or SID Passing... > > > > Use standard HTTP authentication over SSL - that's the only other way. > > > > On Tue, 14 May 2002, Matthew Walker wrote: > > > > > We have a shopping cart product we're developing in PHP, and I've > > > recently come across I dilemma that I need to find a reliable solution > > > to. > > > > > > Many of the people who will be shopping on our sites have cookies > > > disabled, which presents a problem when using sessions. Now, I am > > aware > > > of the fact that we could append the SID constant to every URL, but > > this > > > will not work for us. None of our sites are dynamic, and updating them > > > is out of the question (We have over 100 sites). As well, someday we > > > intend to sell this software, and we don't want to require that people > > > make their sites fully dynamic to accommodate it. > > > > > > So, is there any reliable way to emulate sessions without requiring a > > > cookie, or a variable passed in every URL? > > > > > > Matthew Walker > > > Senior Software Engineer > > > ePliant Marketing > > > > > > > > > > > > --- > > > Outgoing mail is certified Virus Free. > > > Checked by AVG anti-virus system (http://www.grisoft.com). > > > Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 > > > > > > > > > -- > > > PHP General Mailing List (http://www.php.net/) > > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 > > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php >