PHPSESSID gets automatically added to original HTML code

Worker Joined: Apr 26, 2005 Posts: 114

Well, this is so weird i had no clue where to post it, i have no clue whatsoever what is causing the following to happen.

Traditionally, i use Nuke 7.6 with latest chatserv patches (currently 3.3), NukeSentinel and ModRewrite to rewrite links (currently TegoNuke, but i checked the old NextGen tap aswell to see if TegoNuke was causing this...same thing happened)

Just today i started working on a new template for one of my pages and used w3.org's HTML validator to check up on some stuff. Big surprise! I noticed every single link had the infamous phpsessid-extention, like <a href="forums.html?PHPSESSID=96f51bbeabf61e04f3b4d403bac49fb6">

Browsing a bit further in the source code i found that every form was extended with a hidden input area like
<input type="hidden" name="PHPSESSID" value="96f51bbeabf61e04f3b4d403bac49fb6" />

Now, where on earth do they come from? I certainly didn't put them in the code, neither do i want them in there.

For the fun of it, i disabled accepting cookies in my browser. Same result as the html validator... without cookies, these codes are automatically added to the HTML code.

Ok, so this must be a bug, or...? Where do i start looking? Could it be version of PHP on the server or something my web server host activated/deactivated?

Posted: Tue Dec 05, 2006 11:39 am

oh, nevermind...i found it by myself, just my brain temporarily out of order...
It seemes my web host made some changes to the server config, the answer was to put

Code:

php_value session.use_only_cookies 1


php_value session.use_trans_sid 0

into the .htaccess

I hope this isn't a bad thing to do?

registered · Posted: Tue Dec 05, 2006 1:24 pm

I always hate it when a webhost thinks they're smart and should think for you.
Why the hell start a file based session if i don't use it anyway?

If i realy want a session i would just call session_start() in my own way (mostly DB based instead of file).

Just put the following in your .htaccess

Code:

php_value session.auto_start 0

If that fails then put in your php file:

Code:

session_destroy(); // stupid host

[ Only registered users can see links on this board! Get registered or login! ]

Posted: Tue Dec 05, 2006 8:12 pm

NoFantasy, most excellent advice! Thanks.