note 11912 deleted from ref.session.php by sniper

[Editor's note: So others will not be mislead by the information in this note, and in case someone else would fall into the same misunderstanding, I am adding this comment, and leaving this (erroneous) note. Ehem, the & entity should be used when writing HTML output, not when generating a QUERY_STRING for a GET-style URL. Read the CGI specs, the "&" is a value=variable delimiter, you are completely mixing up things. URL/CGI specs != HTML specs, and also URL/CGI specs != XML specs. Please do read the specs before posting incorrect information.] php 4.0.4 pl1 does not correctly encode the & as & when trans-sid is enabled. this is rather annoying because this is simply invalid html. it does work only because browser are used to all kinds of wrong code, but that´s not the problem. ie. php writes url.php4?some=arg&PHPSESSID=xxxx where url.php4?some=arg&PHPSESSID=xxxx would be correct. & is a special xml/html char and must always be encoded in a valid html document. if you care about this (i do) you have to write the url yourself, at least in this version of php.