note 2776 deleted from Session handling functions by sniper
| From: | sniper@php.net | Date: | Mon, 02 Jul 2001 10:00:43 +0000 |
| Subject: | note 2776 deleted from Session handling functions by sniper | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-14890@lists.php.net to get a copy of this message | ||
session.use_cookies = 0 should be default otherwise Webmasters might think cookies are useable for
anything.
I've run >15000 users sites using cookies (in both PHP and ASP) and that is something I
never do again. Browsers accidently pick up wrong cookie from a missconfigured proxy on the internet
and people log in on somebody elses account and there is nothing you can do about it. Not goood.
Otherwise sessions seems great.
<p>
Editor's note: This is not an issue. PHP automatically makes pages using sessions uncacheable
(per default. You can change that.)