Posted by petersprc on 11/15/06 23:44

Hi,

Many session-based sites require cookies. But use_trans_sid would be
the way to go if you want to support cookie-less sessions.

listerofsme...@hotmail.com wrote:
> Hi all,
>
> Constructing my first web app, and wanted to enable
> session.use_trans_sid so that people without cookies could still use my
> site.
>
> After braving a nightmare of set_ini(), and .htaccess to try (without
> joy) to turn it on, I find when searching for help that the vast
> majority of people are trying to turn it OFF.
>
> Now I know there are potential security risks with people mailing or
> posting links with session ID's embedded, but surely support is still
> needed for non cookie people?
>
> Is it common practice now to only support cookies? Do people roll their
> own non-cookie support somehow instead?
>
> Many thanks

[Back to original message]