Hi,
I use session fonctions with windows 2000 and 2003 with IIS and
php 4.3.4 (NTFS)
Session files are in c:\temp
------
session.save_pa th = c:\Temp
-----------
Session timeout : 60s
--------
session.gc_maxl ifetime = 60
--------
But my session files are never deleted. (only by windows 4 days after)
so if i cpy the session id, i wait 2 hours and i paste the session id in
the url, it works !! Not very secure
As i use SID in th url, it's easy to copy it
I've tried to use session cookie but it seems not to work
-----------------
session.use_coo kies = 1
-------------------
What is the problem ??
Thanks
Cyrille
I use session fonctions with windows 2000 and 2003 with IIS and
php 4.3.4 (NTFS)
Session files are in c:\temp
------
session.save_pa th = c:\Temp
-----------
Session timeout : 60s
--------
session.gc_maxl ifetime = 60
--------
But my session files are never deleted. (only by windows 4 days after)
so if i cpy the session id, i wait 2 hours and i paste the session id in
the url, it works !! Not very secure
As i use SID in th url, it's easy to copy it
I've tried to use session cookie but it seems not to work
-----------------
session.use_coo kies = 1
-------------------
What is the problem ??
Thanks
Cyrille