Posted by Oli Filth on 05/10/05 20:33

gcook wrote:
> Hi,
>
> I've got a mandrake 10.1 webserver. I'm having sporadic problems from
> users (no discernable trend, other than I believe they all have cookies
> disabled) not having their sessions maintained.
>

Well that's your answer. Sessions *are* cookies. The only way round this
is to set the session.use_trans_sid directive instead (see the PHP
manual page on sessions), and the session ID will be passed in the URL
instead. However, this imposes some severe security and usability risks,
and isn't recommended.

If users insist on having cookies disabled, they have to expect greatly
reduced functionality on modern websites, and will either have to put up
with not staying logged on, or allow cookies from your site.


--
Oli

[Back to original message]