note 39160 deleted from function.session-id by betz
| From: | betz@php.net | Date: | Mon, 19 Jan 2004 11:48:39 +0000 |
| Subject: | note 39160 deleted from function.session-id by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-63826@lists.php.net to get a copy of this message | ||
Note Submitter: Inglorion
----
Is there a way to stop the session id from getting passed? I have a website where users can log in
to access certain features after logging in. I use sessions to track those users, but I don't
want to burden non-logged in visitors with cookies, much less obfuscate their URLs.
I tried the code below, but it didn't do what I want:
if(!session_id()) {
session_start();
}
if(isset($_SESSION['user'])) {
$user = $_SESSION['user'];
} else {
session_destroy();
session_id(FALSE);
}
The session id is still passed, even though it is supposedly set to FALSE and the session destroyed
if no user variable was registered.
Any help appreciated.