note 20638 deleted from ref.session by sniper
| From: | sniper@php.net | Date: | Sun, 28 Jul 2002 00:58:34 +0000 |
| Subject: | note 20638 deleted from ref.session by sniper | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-33760@lists.php.net to get a copy of this message | ||
When using the transparent SID functionality, be warned that if you are using
zlib.output_compression = On in your php.ini to compress all your output then the automatic
insertion of SIDs into relative href's and into forms will NOT work.
I presume this is because the parser which does the insert of the SIDs is run after the web page is
compressed.
Since compression makes the site run massively faster (try www.forestknoll.com), for instance a
packet dump of one page without compression is 38k and with compression it is 4.9k, I have switched
the SID functionality off.
Fortunately I use http basic realm authentication over ssl, which to me is the best session handler
of all, it is impossible to hijack and it works with all browsers.