[Phplib-users] documentation about security in propagation

[Giancarlo <gia...@na...>]

I think the documentation is nebulous when it says
'cookies will be used when available'.
This is true also for php docu.
The meaning of that word 'when available' does ONLY mean 'when a cookie 
already exists @client', not 'when cookies are enabled @client'.
Because this can ingenerate a kind of false security on the designer, 
not to speak in the user with the enabled cookies.
In fact cookie enabled  clients will adopt any (preexistent now, at 
last, not user-fantasy) SID got in the URL and stay in GET mode, and 
never receive a cookie, though these are enabled.