do not send cookie when session is passed in URL, same as it happens with GET/POST

diff --git a/ext/session/session.c b/ext/session/session.c
index 09408eb31488daa656d0fc3ca6ecd18d61f01b61..874bbc67d9765025fcecd4110515d2053a89bc0c 100644 (file)
--- a/ext/session/session.c
+++ b/ext/session/session.c
@@ -1275,6 +1275,7 @@ PHPAPI void php_session_start(TSRMLS_D)
                p += lensess + 1;
                if ((q = strpbrk(p, "/?\\"))) {
                        PS(id) = estrndup(p, q - p);
+                       PS(send_cookie) = 0;
                }
        }