PHP adds hidden value

[Richard Levasseur]

Re: PHP adds hidden value


Ernestino wrote:

Il Mon, 31 Jul 2006 07:38:48 -0700, Richard Levasseur ha scritto:
>

Ernestino wrote:

[testo citato nascosto]

It should be true

>
Well, and what if the user has cookies disabled?
>
Francesco

Then they don't get a cookie from the cookie jar ;)

Sessions work by giving a unique id the browser so that it can identify
itself to the browser. This has to be passed around somehow, and the
easiest and most transparent way is using cookies. its just like
storing username/password in the cookie except its a randomly generated
unique id that is specific for that browser. If a cookie isn't used,
then it needs to be passed around some other way.

[P Sobstel]

Re: PHP adds hidden value

The validator raises errors, because PHP uses default value & for
adding vars to urls. And if your site is written in XHTML it should be
&. But you don't have to use only cookies (though it's recommended
for the sake of security - remember though that if you disable
transparent sid support then session won't work for users that don't
accept cookies from your site).

You can simply add following lines either to .htaccess or php.ini. :

php_value arg_separator.i nput ;&
php_value arg_separator.o utput &

Check manual if you wanna know what these directives exactly do.

-----
sopel