note 20638 deleted from ref.session by sniper

From: Date: Sun, 28 Jul 2002 00:58:34 +0000
Subject: note 20638 deleted from ref.session by sniper
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-33760@lists.php.net to get a copy of this message
When using the transparent SID functionality, be warned that if you are using zlib.output_compression = On in your php.ini to compress all your output then the automatic insertion of SIDs into relative href's and into forms will NOT work. I presume this is because the parser which does the insert of the SIDs is run after the web page is compressed. Since compression makes the site run massively faster (try www.forestknoll.com), for instance a packet dump of one page without compression is 38k and with compression it is 4.9k, I have switched the SID functionality off. Fortunately I use http basic realm authentication over ssl, which to me is the best session handler of all, it is impossible to hijack and it works with all browsers.

« previous php.notes (#33760) next »