I've come across something of a problem on a website which uses Sessions (and PHP). The server it is hosted on is setup to allow session ID's to be sent as GET variables (i.e. part of the URL string), if the user *apparently* doesn't have cookies enabled.
Now, for whatever reason, the server is deciding that MANY users don't have cookies enabled, even when they do, and is therefore pushing them to the GET method, as opposed to setting a cookie and leaving it alone! This isn't a problem relevant to this list (I have other concerns, regarding security, etc. but that is best discussed elsewhere), however it does do some bad things to links on the page!
The website is http://www.platform7.info/, and it (before moving servers) validated without any problems. What's happening is that PHP is appending "&platform7=SESSION ID GOES HERE" to all links on the webpage, when in GET session (e.g. not cookies) mode. You'll note that & should be & in order to validate...
Has anyone else had this happen to them before? Any suggestions are welcome.
Cheers,
Joshua Street
E-mails and any attachments sent from base10solutions are to be regarded as confidential. Please do not distribute or publish any of the contents of this e-mail without the sender’s consent. If you have received this e-mail in error, please notify the sender by replying to the e-mail, and then delete the message without making copies or using it in any way. Although base10solutions takes precautions to ensure that e-mail sent from our accounts are free of viruses, we encourage recipients to undertake their own virus scan on each e-mail before opening, as base10solutions accepts no responsibility for loss or damage caused by the contents of this e-mail. |
p.s. This is primarily an interim fix, as in a few months I shall be disabling (at code level) support for GET sessions, mandating the use of cookies.
<<attachment: logo.gif>>
