Session cookies

[Ginja_Ninja]

Hi,

 

As the title really, i want to force cookies instead of session id's in the url.

I am using

 

ini_set('session.use_trans_sid', 0);

 

but when i check afterwards, it tells me its still set to 1.

 

Any reasons why ?

[TweezerMan]

According to one of comments in the PHP documentation, it just doesn't work. You might try setting this option in your .htaccess file instead:

>php_flag session.use_trans_sid off

[Ginja_Ninja]

Thank your TCH-David for your time.

 

However unfortunatly using this line in the .htaccess isnt an option.

 

The issue i am having dificulting understanding is this:

 

I have buit a login system, and i as a test i have disabled cookies in my browser. However a session is still being created, and my user can login. The session id is not in the url.

They then can't browse other pages which use the same code to check for

 

$_SESSION['login_id'];

 

SO why can the session get created in the first place without browser cookies.

(I have checked and no cookies are being created.)

 

Thanks

Edited October 12, 2005 by Ginja_Ninja

[Ginja_Ninja]

Ignore the above post, i think i have found a tiny loophole in my code.