note 58077 added to ref.session

If you would like to ensure your sessions with referer checking you must use iniset() regularly, as "session.referer_check contains the substring you want to check each HTTP Referer for" so there is no way PHP can automatically know which URL you are expecting, e.g. it does not assume SCRIPT_NAME or anything else. I had a serious problem when I tried to disable referer checking with session.referer_check = 0 which of course does not work ---- Manual Page -- http://www.php.net/manual/en/ref.session.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+58077 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+58077&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+58077&report=yes Search -- http://master.php.net/manage/user-notes.php