473,326 Members | 2,815 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,326 software developers and data experts.

Session Info Added to URL

I'm noticing that when my homepage first starts up, all the menu links
to other pages have the session info appended to the URL. For example:

href="products/product_list.php?PHPSESSID=45759f8aadee64cff2db657 48977ac67"

This is done automatically as the original URL that I coded does not
have the session information added to it.

My first question is, is this normal behavior? The reason I'm
concerned is I have been tracking the Google Bot's activity on our
site and it hits the homepage and does not crawl the other pages. I'm
concerned the added session info is throwing it off.

Should I be concerned and if so, is there a way of preventing it from
appending the session info? I don't have the option of removing the
session_start() from the page because I must test for a session
variable.

Any help on this would be greatly appreciated...

Paul
Jul 17 '05 #1
4 2554
I noticed that Message-ID:
<8b************************@posting.google.com> from Celebrate contained
the following:
Should I be concerned and if so, is there a way of preventing it from
appending the session info? I don't have the option of removing the
session_start() from the page because I must test for a session
variable.

The way I understand this is that there are two ways of passing the
session info. One is by setting a cookie and the other is by storing
the session variables on the server and then accessing them via a
session id.

Your security settings are probably preventing cookies being set, hence
the addition of the ID (someone please correct me if I've got this
wrong)
--
Geoff Berrow
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Jul 17 '05 #2
Celebrate wrote:
I'm noticing that when my homepage first starts up, all the menu links
to other pages have the session info appended to the URL. For example:

href="products/product_list.php?PHPSESSID=45759f8aadee64cff2db657 48977ac67"

This is done automatically as the original URL that I coded does not
have the session information added to it.

My first question is, is this normal behavior? The reason I'm
concerned is I have been tracking the Google Bot's activity on our
site and it hits the homepage and does not crawl the other pages. I'm
concerned the added session info is throwing it off.

Yes, it's normal. The first time the session is started, PHP doesn't
know if you support cookies or not. So it sends you a session cookie and
it also rewrites the URL. The second time, PHP receives the cookie, and
thus stops rewriting URLs.
The solution for google is to start the session only when it's
necessary. I think it's also possible to change php.ini in order to only
use cookies for sessions. But if you do that, all the visitors who
deactivate cookies won't be able to use your web site.

JB.
Should I be concerned and if so, is there a way of preventing it from
appending the session info? I don't have the option of removing the
session_start() from the page because I must test for a session
variable.

Any help on this would be greatly appreciated...

Paul


Jul 17 '05 #3
pl****@celebrate-software.com (Celebrate) wrote in message news:<8b************************@posting.google.co m>...
I'm noticing that when my homepage first starts up, all the menu links
to other pages have the session info appended to the URL. For example:

href="products/product_list.php?PHPSESSID=45759f8aadee64cff2db657 48977ac67"

This is done automatically as the original URL that I coded does not
have the session information added to it.

My first question is, is this normal behavior? The reason I'm
concerned is I have been tracking the Google Bot's activity on our
site and it hits the homepage and does not crawl the other pages. I'm
concerned the added session info is throwing it off.
It's because in you PHP.ini file, you have session.use_trans_sid
= 1. See http://cvs.php.net/co.php/php-src/php.ini-dist

Should I be concerned


Not much except for security reasons. Look at your ini file's
session section for more stuff.

---
"US got a nuclear bomb that can destroy the world 13 times. Russia
got a nuclear bomb that can destroy the world 7 times. But...my
friend! Tell me! CAN YOU KILL A MAN TWICE??!!!!!" -- P.A.Sangma, Peace
loving Indian politician against India's step to go for a nuclear
test.
Email: rrjanbiah-at-Y!com
Jul 17 '05 #4
ng**********@rediffmail.com (R. Rajesh Jeba Anbiah) wrote in message news:<ab**************************@posting.google. com>...
pl****@celebrate-software.com (Celebrate) wrote in message news:<8b************************@posting.google.co m>...
I'm noticing that when my homepage first starts up, all the menu links
to other pages have the session info appended to the URL. For example:

href="products/product_list.php?PHPSESSID=45759f8aadee64cff2db657 48977ac67"

This is done automatically as the original URL that I coded does not
have the session information added to it.

My first question is, is this normal behavior? The reason I'm
concerned is I have been tracking the Google Bot's activity on our
site and it hits the homepage and does not crawl the other pages. I'm
concerned the added session info is throwing it off.


It's because in you PHP.ini file, you have session.use_trans_sid
= 1. See http://cvs.php.net/co.php/php-src/php.ini-dist

Should I be concerned


Not much except for security reasons. Look at your ini file's
session section for more stuff.

---
"US got a nuclear bomb that can destroy the world 13 times. Russia
got a nuclear bomb that can destroy the world 7 times. But...my
friend! Tell me! CAN YOU KILL A MAN TWICE??!!!!!" -- P.A.Sangma, Peace
loving Indian politician against India's step to go for a nuclear
test.
Email: rrjanbiah-at-Y!com


Thanks for the help guys.

Paul
Jul 17 '05 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Dan King | last post by:
At a summary page, I am trying to clean up Session.Contents so the user can go back to the main page and not retain any unnecessary info. I have entered this into my summary page, but it seems to...
1
by: Scott Wickham | last post by:
I'm having a problem saving session information on one form and retrieving it on a subsequent form...for only one out of a number of users. Actually, I'm not absolutely certain it's a session...
1
by: Tim Meagher | last post by:
I am trying to use Forms Authentication for a web page with cookies and a session state. I'm getting a little confused about how to use both and how the timeouts work. My goal is to have a web...
5
by: Logickle | last post by:
Hi, all. I'm working on an application which requires communicating session info between separate web apps running on the same web server. The out of process server method sounded ideal, and...
1
by: MrGiga (Robb Sadler) | last post by:
I have a set of pages with C# code attached to manage session information. They hang their info off of the session string and store it in a MSDE table. I have all of this code working well in one...
3
by: Nahrin | last post by:
I implimented ASP.NET 2.0 Client callback script (ICallbackEventHandler) to get the result back from server without postback the page. Problem is when seesion expires or authentication times out,...
17
by: Riaan | last post by:
Hi guys! I have an issue that needs urgent resolution. Imagine this scenario: You have: 1 production server running Windows Server 2003, IIS6 and an instance of MSDE 2000. There is an...
7
by: Antonio | last post by:
Hi, everyone, I need the web application's session to expire after 20 minutes and I added this in the web.config file but it is not working. I was able to go onto the default.aspx page after a...
16
by: Jonathan Wood | last post by:
Greetings, I was wondering if anyone here has a good understaning of the Session object. I know there are options like the Session.Abandon method and the regenerateExpiredSessionId setting,...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.