Warum erscheint die SID in der Adressleiste?

[Till]

Grummel : )

29.4. Wie übergebe ich Session-IDs ohne Cookies an eine andere Seite? Was ist Fallback?
http://www.dclp-faq.de/q/q-sessions-fallback.html

Ab: PHP4 kann man auch mit dem --enable-trans-sid-Parameter kompilieren.

Oder:

session.use_trans_sid (boolean)

session.use_trans_sid whether transparent sid support is enabled or not. Defaults to 0 (disabled).

Note: For PHP 4.1.2 or less, it is enabled by compiling with --enable-trans-sid. From PHP 4.2.0, trans-sid feature is always compiled.

URL based session management has additional security risks compared to cookie based session management. Users may send a URL that contains an active session ID to their friends by email or users may save a URL that contains a session ID to their bookmarks and access your site with the same session ID always, for example.