Skip to main content ↑ ↓
Topic: PHPSESSID in URLs (Read 1623 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

PHPSESSID in URLs

I'm looking for the right spot to include:
Code: [Select]
ini_set("session.use_cookies", 1);
ini_set("session.use_only_cookies", 1);
ini_set("session.use_trans_sid", 1);
...to remove PHPSESSID from URLs. It needs to be included at the beginning of every page and before:

Code: [Select]
session_start()


You can see the PHPSESSID in URLs in the Google Structured Data Validator.

Re: PHPSESSID in URLs

Reply #1 –

Yes, guests get sessionid in the url during the 1st page load.
Google will catch up in a short while when canonical url is taken as reference.
It's not actually a php setting, but its injected in the code (and last time I remove some fancy stuff started happening, but can't remember the specifics because it was so long ago).
Well, you can try at the beginning of index.php, but as I said I'm not sure about the implications.
Bugs creator.
Features destroyer.
Template killer.
 

Re: PHPSESSID in URLs

Reply #2 –

Well, I found/resolved the issue:

File: /sources/Session.php

find:
Code: [Select]
@ini_set('session.use_only_cookies', false);

replace:
Code: [Select]
@ini_set('session.use_only_cookies', true);

I'll monitor for issues. So far so good.