Re: [PHP] $_SESSION question

2002-11-14 Thread Ernest E Vogelsinger
At 02:42 15.11.2002, Sascha Cunz said: [snip] >This sounds like a pretty good idea to work around that problem :-) > >Does this system work, if the user decides to split "one session" accross >multiple "Browser-Windows", i.e. the uses the "Open in new window

Re: [PHP] $_SESSION question

2002-11-14 Thread Sascha Cunz
Hi Jochen, > How can I process $_SESSION variables if the user disables cookies > and session.use_trans_sid = 0 ? You could use a combination of outputbuffering and a self-written session-handler. So you could build a trans_sid-alike system, that would do more checks (i.e. compare IP-Addresses)

Re: [PHP] $_SESSION question

2002-11-14 Thread Sascha Cunz
> Simply put - you can't. > > You need a way to transmit the session identifier, and AFAIK there's > nothing except either cookies or SID. > > Using SID for security relevant issues presents a problem - users can send > links with a SID to friends by mail or else, so this is not really a secure > s

Re: [PHP] $_SESSION question

2002-11-14 Thread Ernest E Vogelsinger
At 02:18 15.11.2002, Jochen Kächelin said: [snip] >How can I process $_SESSION variables if the user disables cookies >and session.use_trans_sid = 0 ? [snip] Simply put - you can't. You need a way to transmit the ses

[PHP] $_SESSION question

2002-11-14 Thread Jochen Kächelin
I made a test with the Phoenix-Browser and ENABLE COOKIES = OFF in the Privacy configuration of the browser. my index.php: index2.php\n"; ?> my index2.php: My php.ini: session.use_trans_sid = 0 on index2.php there's no result -> $_SESSION["test"] is not set. when I enable session.use_tr