"Double" PHPSESSID url problem

[Arnaud]

Hi,
I would like to protect myself against these two PHPSESSID I have sometimes
in the url...
I'm coding a session-based script which will be upload on a shared server. I
can't control if this one will be session_use_trans_id = 0 or 1.

Some users don't accept cookies, so Php can't store the session information
this way, if the session_use_trans_id = 1, it will use the URL, but if it's
disabled the only way to use the url is to manually specify in each link i
have something like "<?echo strip_tags(SID)?>" BUT i have no way to test if
the server is trans_id enabled or not, so if it's the case i have two
PHPSESSID=random_value in the url...

Is there a way for a script to know if the server is session_use_trans_id
enabled or not ? I didn't find any get_trans_id function...

Thanks,
Arnaud

[Chung Leong]

"Arnaud" <ex*****@example.com> wrote in message
news:41***********************@news.free.fr...

Hi,
I would like to protect myself against these two PHPSESSID I have sometimes in the url...
I'm coding a session-based script which will be upload on a shared server. I can't control if this one will be session_use_trans_id = 0 or 1.

Some users don't accept cookies, so Php can't store the session information this way, if the session_use_trans_id = 1, it will use the URL, but if it's disabled the only way to use the url is to manually specify in each link i
have something like "<?echo strip_tags(SID)?>" BUT i have no way to test if the server is trans_id enabled or not, so if it's the case i have two
PHPSESSID=random_value in the url...

Is there a way for a script to know if the server is session_use_trans_id
enabled or not ? I didn't find any get_trans_id function...

Thanks,
Arnaud

http://www.php.net/ini_set/

[Arnaud]

"Chung Leong" <ch***********@hotmail.com> a écrit dans le message de
news:8v********************@comcast.com...

http://www.php.net/ini_set/

I'm afraid session.use_trans_id can't be set that way (php_ini_perdir and
php_ini_system only) but your answer make me use ini_get() and that's
perfect, thanks.

I would be interested by reading other comments about that double PHPSESSID,
how do you manage this thing ? Ini_get too ?

Thanks

Arnaud