[Phplib-users] session stealing and fallback_mode=get

[Giancarlo P. <gia...@na...>]

Uhh. 
I tried the builtin session functions of Php 4, and it's the same
behaviour.
You can force a particular session via get even if cookies are enabled.

Is the php.ini enable_trans_id that disables this alternative
propagation?

The fact that you can place something on a server, in a known position
(eg /tmp/sess_ciao), is really nasty thing.

Giancarlo