search

sektioneins / suhosin

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
https://www.suhosin.org
Other
471 stars 71 forks source link

disable URL-based sessions #109

Closed ghost closed 8 years ago

ghost commented 8 years ago

any way? 수호신

bef commented 8 years ago

How about setting session.use_trans_sid to false?

ghost commented 8 years ago

script still use.

bef commented 8 years ago

session.use_trans_sid may have been set in .htaccess within your script's directory or any parent directory. Please recheck, e.g. via phpinfo().

ghost commented 8 years ago

nginx, ty i try @ini_set('session.use_trans_sid', 0);

bef commented 8 years ago

your should also have a look at session.use_cookies and session.use_only_cookies: http://php.net/manual/en/session.configuration.php

As these questions relate to PHP and/or nginx configuration rather than suhosin, I would like to direct this discussion to a more suitable board, e.g. http://stackoverflow.com/questions/1745984/php-session-use-trans-sid