Mark Hensler — Thu, 22 Aug 2002 06:11:50 +0000

from the manual: http://www.php.net/manual/en/ref.session.php

Quote: session.use_trans_sid whether transparent sid support is enabled or not. Defaults to 0 (disabled).

Quote:
There are two methods to propagate a session id:

o Cookies
o URL parameter

The session module supports both methods. Cookies are optimal, but since they are not reliable (clients are not bound to accept them), we cannot rely on them. The second method embeds the session id directly into URLs.

PHP is capable of doing this transparently when compiled with --enable-trans-sid. If you enable this option, relative URIs will be changed to contain the session id automatically. Alternatively, you can use the constant SID which is defined, if the client did not send the appropriate cookie. SID is either of the form session_name=session_id or is an empty string.

Quote: Note: Non-relative URLs are assumed to point to external sites and hence don't append the SID, as it would be a security risk to leak the SID to a different server.

If set to TRUE, PHP will automatically pass $SID transparently (via cookie) if possible, and [if successfull] $SID will be an empty string.