[thelist] PHPSESSID sometimes not transparent

[Michael Wolfe]

At 09:26 AM 6/11/01 +0000, you wrote:
>I have PHP configured/compiled (with Apache on a WINbox) so
>that session IDs aren't shown in the URL(s).
>
>It works for the most part, but occassionally PHPSESSID be
>shown.
>
>ie., NORMALLY the page url shown in the location bar is:
>http://hup.ca/hup_pix.php
>BUT sometimes I'll get:
>http://hup.ca/hup_pix.php?PHPSESSID=a324dff434etc
>
>There doesn't seem to be any pattern to when its shown/not
>shown.. except perhaps if a link is clicked before the page is full
>loaded?
>
>Any PHP experts know why this happens? How to prevent it?

In PHP4, if a cookie can't be set, if the session times out, or if the 
connection is lost, PHP will send the session ID in the URL in order to 
refresh the session.

___________________
Michael Wolfe
Senior Software Engineer

http://www.ework.com
mwolfe at ework.com