[FX.php List] Do session always work?

Steve Winter steve at bluecrocodile.co.nz
Sun Oct 29 15:36:31 MST 2006


Jonathan,

I've also had no problems with using PHP sessions when the browser has
cookies disabled.

I recently built a system which relies heavily on session information, so
I did quite a bit of testing with a 'user' environment which had as much
security as I could apply (no Javascript, no Java, no cookies, pop-up
blocker etc etc) and had no problems with my session information being
available...

Cheers
Steve

> On 27/10/06 2:59 PM, "Jonathan Schwartz" <jonathan at eschwartz.com>
> wrote:
> 
> > Hi Folks,
> > 
> > I'm in the process of working through trouble spots from my last
> project.
> > 
> > The solution relied on sessions.  Some users couldn't get past the
> > login, which used session data to advance to the next page.
> > 
> > I know that cookies can be turned off in the browser.
> > 
> > What pitfalls can occur with sessions?  Or, are there other areas to
> explore?
> > 
> > Thanks
> > 
> > Jonathan
> 
> PHP should normally handle client-side cookies being disabled by
> passing the
> session ID in the URL (as a GET request) to a server-side cookie.
> 
> -- 
> Kevin Futter
> Webmaster, St. Bernard's College
> http://www.sbc.melb.catholic.edu.au/
> 
> 
> 
> ------------------------------------------
> This e-mail and any attachments may be confidential.  You must not
> disclose or use the information in this e-mail if you are not the
> intended recipient.  If you have received this e-mail in error, please
> notify us immediately and delete the e-mail and all copies.  The
> College does not guarantee that this e-mail is virus or error free. 
> The attached files are provided and may only be used on the basis that
> the user assumes all responsibility for any loss, damage or consequence
> resulting directly or indirectly from the use of the attached files,
> whether caused by the negligence of the sender or not.  The content and
> opinions in this e-mail are not necessarily those of the College.
> 
> 
> 
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list




More information about the FX.php_List mailing list