php - Propagating sessions via url -


in php, according manual : "a visitor accessing web site assigned unique id, so-called session id. either stored in cookie on user side or propagated in url."

when , why should prefer passing sessions through url rather cookie?

the main difference session token may sent different domain via referrer, mitigated checking origin ip address. beside this, cookies sent in http headers, url ends in request line. there's no real difference regarding security, because https encrypts both. request url may written in log file , (minor obviously) risk.

cookies default handler pass session tokens, can fallback param in query string when disabled on client side.


Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -