[SOLVED] Question about using session id in URL's

[rh-penguin]

hi,

 

If make my pages so that each link has a session id included inside the URL and if a person copy's that url and gives it to another person would that make any type of a security threat? What happens? does the server automatically see that and somehow changes the session or does it addapt to it......... or what happens?

 

Thanks!

[suzzane2020]

First of all y wud u want to place a session id in a url?

coz a session value can be obtained by just using print_r($_SESSION["sess_name"])

[trq]

First of all y wud u want to place a session id in a url?

coz a session value can be obtained by just using print_r($_SESSION["sess_name"])

 

Session id's can be automatically passed via the url to acomidate users with cookies disabled.

 

would that make any type of a security threat?

 

If the session is still current, it will be taken over by the new user.

[rh-penguin]

o, right. Okay

 

Thank you!