note 31991 deleted from function.session-id by erica
| From: | erica@php.net | Date: | Thu, 15 May 2003 20:09:47 +0000 |
| Subject: | note 31991 deleted from function.session-id by erica | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-48035@lists.php.net to get a copy of this message | ||
Regarding gmgiles comment:
Relying on php's internal session management is dangerous, and one should always pass the PHP
Session ID between pages. Unfortunately, PHP seems inconsistent in its ability to handle sessions
without doing this. I have learned this the hard way, having written several web applications where
I didn't pass the ID in situations where did not have control over the hosting environment. The
applications worked fine when I wrote them, but later, when the server was upgraded by the ISP, the
applications broke.
The moral of the story is pass your session IDs. Your applications will be more robust, and your
clients will be more content in the long run.