Marc Delisle schrieb:
Sebastian Mendel a écrit :
Hi,
i am bit wired - if i remember right we decided to use sessions and to use sessions only with cookies, right?
but why did we decide to allow propagating the session id by url in session.inc.php?
This thread?
https://sourceforge.net/mailarchive/forum.php?thread_id=12454006&forum_i...
ok - but i cannot find a final decision ... ;-)
i vote for cookies only!
i really don't know a really good point to disable cookies - and this (paranoid) people disabling cookies knows how to enable cookies for particular domain