[PHP] php session ID attached to URL

2004-03-04 Thread matthew oatham
Hi, I have a quick question about PHP session. In my website I have included the command session_start(); at the top of every page. Firstly is this correct? Secondly when I visit the website the first link I click on has the php session ID appended to the url however this php session ID is not

RE: [PHP] php session ID attached to URL

2004-03-04 Thread Ford, Mike [LSS]
On 04 March 2004 10:25, matthew oatham wrote: Hi, I have a quick question about PHP session. In my website I have included the command session_start(); at the top of every page. Firstly is this correct? Yes (sort of). The real deal is that session_start() has to occur before you start

Re: [PHP] php session ID attached to URL

2004-03-04 Thread Marek Kilimajer
matthew oatham wrote: Hi, I have a quick question about PHP session. In my website I have included the command session_start(); at the top of every page. Firstly is this correct? Yes, this makes sure you don't lose the session somewhere. Secondly when I visit the website the first link I click

RE: [PHP] php session ID attached to URL

2004-03-04 Thread Hardik Doshi
In case, client has selected disabled cookie option then everytime you have to append session id variable to the URL. While appending the session id variable to the URL, one must know the security concerns. This is the nice article about session and security.