indrek siitan wrote:
> > As far as I knew Apache::Session has never even had anything to
> > do with cookies. It is a persistent storage mechanism where the
> > session "handle" is uniquely generated ID.
> 
> and where do you think the session ID is kept?
> 
> yup. right. in a cookie.

Well, no, actually.  As Gunther said, Apache::Session doesn't care how
you make the session ID persistent.  You could use cookies, or path
info, or hidden fields, or some crazy DNS mechanism.  Apache::Session
doesn't know anything about any of those - it requires you to retrieve
the ID from the request yourself and pass it along.

Some apps that use Apache::Session, like Embperl and Mason, have chosen
to rely on cookies.  They implement the cookie part themselves. 
Apache::Session has nothing to do with cookies.

- Perrin

Reply via email to