Jan 25
Patrick Larkin Session ID lurks in urls
Jan 25, 2013; 23:28
Patrick Larkin
Session ID lurks in urls
Hi -
I'm trying to track down the cause of this problem but perhaps this is just the way it is.
On every page of the site loaded via include I have something like this:
Session_start( -Name='MySession', -Expires='5', -UseAuto);
I used -UseAuto because I don't want the session id to be in the URL. The session id never appears in the URL as I navigate the site. I go to our login page and I log in. The login page ends the empty session I had and creates a new one filled with goodies. As I navigate the site post-login, there still are not session ids in the URLs. Perfect. But then I log out using a simple script containing:
[session_end: -Name='MySession']
[redirect_url: '/staff/']
When the logout executes and I end up on the redirected page, ALL the URLs linked on that page have session ids but just for one click, then they all go away again.
Thanks...
Patrick
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso
Lasso@lists.lassosoft.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>
Jan 25
Jonathan Guthrie Re: Session ID lurks in urls
Jan 25, 2013; 23:33
Jonathan Guthrie
Re: Session ID lurks in urls
Jan 25
Jonathan Guthrie Re: Session ID lurks in urls
Jan 25, 2013; 23:33
Jonathan Guthrie
Re: Session ID lurks in urls
Jan 25
Patrick Larkin Re: Session ID lurks in urls
Jan 25, 2013; 23:53
Patrick Larkin
Re: Session ID lurks in urls
Jan 26
Bil Corry Re: Session ID lurks in urls
Jan 26, 2013; 06:06
Bil Corry
Re: Session ID lurks in urls
Jan 26
Jonathan Guthrie Re: Session ID lurks in urls
Jan 26, 2013; 00:16
Jonathan Guthrie
Re: Session ID lurks in urls
Jan 26
Patrick Larkin Re: Session ID lurks in urls
Jan 26, 2013; 09:37
Patrick Larkin
Re: Session ID lurks in urls
Jan 26
Jolle Carlestam Re: Session ID lurks in urls
Jan 26, 2013; 14:53
Jolle Carlestam
Re: Session ID lurks in urls