rAph
05-03-2003, 03:15 PM
Hey, I'm working with PHP sessions on my site, and want to pass the session_id via URLs and not cookies. I read about transparent sid and that if enabled, PHP automatically adds the session ID to every URL. But more importantly, the session_id is not displayed in plain text on the url bar, so it makes it harder for session stealling. So I've got session.use_trans_sid set to on, but now on every page on my site, I've got the session id in plain text. How do I make it so that PHP masks the sid? Thanks