You are here: Re: Can SID be trusted? « PHP Programming Language « IT news, forums, messages
Re: Can SID be trusted?

Posted by Michael Fesser on 10/16/60 12:00

..oO(Jerry Stuckle)

>Sebastian Lisken wrote:
>
>> The obvious purpose is to pass on the session ID from one page
>> to the other. I hadn't done this before so I'm glad you're asking
>> about it. I have now read the section "Passing the Session ID" in
>> http://www.php.net/manual/en/ref.session.php and it says that the ID is
>> passed on transparently if session.use_trans_sid is enabled. I can only
>> guess that the code was developed in a context where it wasn't. As it
>> turns out, on my WAMP 5 installation it is disabled too. I've enabled
>> it, taken away the <? echo SID; ?> part from one of my links, and seen
>> the effect of the option. Thanks for educating me there, but with that
>> experience I'd say it's good practice not to rely on the option (I don't
>> even know what the setting is on the production server that my work will
>> be transferred to, but the site has switched servers before so I don't
>> want to rely on the setting there anyway).
>>
>
>I always rely on it. If your hosting company doesn't support it, get a
>new hosting company. It's pretty standard in PHP. Every host I know of
>has it enabled.

All session configuration directives are marked as "PHP_INI_ALL", so you
can change them even with ini_set() at the beginning of your scripts.

Micha

 

Navigation:

[Reply to this message]


Удаленная работа для программистов  •  Как заработать на Google AdSense  •  England, UK  •  статьи на английском  •  PHP MySQL CMS Apache Oscommerce  •  Online Business Knowledge Base  •  DVD MP3 AVI MP4 players codecs conversion help
Home  •  Search  •  Site Map  •  Set as Homepage  •  Add to Favourites

Copyright © 2005-2006 Powered by Custom PHP Programming

Сайт изготовлен в Студии Валентина Петручека
изготовление и поддержка веб-сайтов, разработка программного обеспечения, поисковая оптимизация