Posted by Sebastian Lisken on 11/11/43 12:00

Jerry Stuckle <jstucklex@attglobal.net> wrote:
[session.use_trans_sid]
> I always rely on it. If your hosting company doesn't support it, get a
> new hosting company. It's pretty standard in PHP. Every host I know of
> has it enabled.

Well, I won't remove hundreds of occurrences of SID just to arrive at
code that produces the same results if the option is on but breaks if
it isn't. Why do the work just to get code that depends on an option I
could previously ignore? As seems to be the case, there's no reason to
touch those occurrences for security reasons so I'm not going to invent
a new reason now. If I was starting from scratch and deciding whether to
produce these pieces of code or not, then it might be another story. And
I won't need to bully my client about changing their hosts, which I'm
not in a position to do anyway. (The existing host might have the option
enabled for all I know, but I don't care.)

Sebastian

[Back to original message]