note 5393 deleted from ref.session by yohgaki
| From: | yohgaki@php.net | Date: | Sat, 19 Jan 2002 06:13:36 +0000 |
| Subject: | note 5393 deleted from ref.session by yohgaki | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-25084@lists.php.net to get a copy of this message | ||
This is a result of some of my experience with PHPLIB, and may answer some of the questions posted
here. I am not experienced with PHP4 (yet).
If the user has turned Cookies off, meaning the Session ID now needs to be propogated, you must be
very careful. (Which in reality means you ALWAYS have to be careful unless you are in a situation
where you are guaranteed you have Cookies on.)
For example, if you have a form that you need to propogate variables from, and you need to propogate
the Session ID, you must add the session ID variable as a hidden variable to the form. Also, you
might be forced to use GET to make it work. I don't see anything above mentioning the use of
POST to propogate session IDs.
However, if PHP automatically adds the session ID to the URL, then you can't use POST at all.
If there is a GET variable in the URL, the POST variables will be ignored.