From: Yasuo Ohgaki Date: Fri, 19 Jul 2002 09:47:06 +0000 (+0000) Subject: MFH X-Git-Tag: php-4.2.3RC1~70 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=154b12f2b530d1a8fb181f045ba756bd072c1bbd;p=php MFH @ Trans SID is disabled by default in php.ini --- diff --git a/php.ini-dist b/php.ini-dist index 1ee71daa29..96d871bacd 100644 --- a/php.ini-dist +++ b/php.ini-dist @@ -745,8 +745,10 @@ session.cache_limiter = nocache ; Document expires after n minutes. session.cache_expire = 180 -; use transient sid support if enabled by compiling with --enable-trans-sid. -session.use_trans_sid = 1 +; trans sid support is disabled by default. +; Use of trans sid may risk your users security. It may not be +; feasible to use this option for some sites. Use this option with caution. +session.use_trans_sid = 0 url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry" diff --git a/php.ini-recommended b/php.ini-recommended index f166bc999c..0d0ca0350c 100644 --- a/php.ini-recommended +++ b/php.ini-recommended @@ -752,8 +752,10 @@ session.cache_limiter = nocache ; Document expires after n minutes. session.cache_expire = 180 -; use transient sid support if enabled by compiling with --enable-trans-sid. -session.use_trans_sid = 1 +; trans sid support is disabled by default. +; Use of trans sid may risk your users security and it may not be +; feasible to use it for some sites. Use this option with caution. +session.use_trans_sid = 0 url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"