Posted by listerofsmeg01 on 11/15/06 23:28

Hi all,

Constructing my first web app, and wanted to enable
session.use_trans_sid so that people without cookies could still use my
site.

After braving a nightmare of set_ini(), and .htaccess to try (without
joy) to turn it on, I find when searching for help that the vast
majority of people are trying to turn it OFF.

Now I know there are potential security risks with people mailing or
posting links with session ID's embedded, but surely support is still
needed for non cookie people?

Is it common practice now to only support cookies? Do people roll their
own non-cookie support somehow instead?

Many thanks

[Back to original message]