Jim Gallacher wrote:
Nick wrote:

How about an explicit "None" value to completely disable it? If you don't want users on your site using it.

Do you mean to disable sessions, or just the session configuration?

Yes, I'm sorry, I mean disable the session mechanism altogether. Some admins may see it as a potential security issue. Although I'm sure you're doing the best you can to make sure it can't be exploited as such, if you make it so people can evenutally plug in their own session mechanisms, there might be room for abuse.

Nick

Reply via email to