On Saturday 22 March 2003 11:38, Justin French wrote:

> on 22/03/03 4:18 AM, Jason Wong ([EMAIL PROTECTED]) wrote:
> > Bottom line is if your site requires to login you should make it
> > mandatory that the user enables cookies on their browser.
>
> mandatory seems a little harsh... I haven't seen any bad side effects of
> trans sid yet (granted, I haven't pushed it to the limits with javascript
> or anything like that).
>
> why can't the OP rely on cookies where available, and trans sid where not,
> and offer an advisory that cookies are a preferred, supported, advised way
> to login, rather than mandatory?

According to the OP, using cookies did not work for some people. Someone 
suggested using sessions, as I pointed out in my previous mail, sessions 
still rely on the browser accepting them (unless you use trans sid). In tests 
that we did quite a while ago (back in 4.0.6) we found that trans sid wasn't 
100% reliable (fails in mid-session under some circumstances), this problem 
may have been fixed since so YMMV.

My opinion is that it's a simpler and more direct approach to have a statement 
like 

  "To login your browser must accept cookies" 

rather than 

  "You can try to login without cookies, sometimes it may work, sometimes it 
may fail, sometimes you may get logged out for no apparent reason, in these 
cases please enable cookies on your browser"

:)

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
------------------------------------------
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
------------------------------------------
/*
/usr/news/gotcha
*/


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to