PHP - How Sessoion IDs Are Transferred in PHP

How Sessoion IDs Are Transferred in PHP

Q

How Session IDs Are Transferred on Your Web Server in PHP?

✍: FYIcenter.com

A

As you know there are two options the PHP engine can use to transfer session IDs to the client browsers. But how to do know which option is your PHP engine is using? The PHP sample script will help you to find out:

<?php
  session_start();
  print("<html><pre>");

  $queryString = $_SERVER["QUERY_STRING"];
  print("Query string of the incoming URL: ".$queryString."\n");

  print("Cookies received:\n");
  foreach ($_COOKIE as $name => $value) {
     print "  $name = $value\n";
  }

  $myLogin = $_SESSION["MyLogin"];
  print("Value of MyLogin has been retrieved: ".$myLogin."\n");
  $myColor = $_SESSION["MyColor"];
  print("Value of MyColor has been retrieved: ".$myColor."\n");

  print("</pre></html>\n");
?>

You need to save this script to your Web server as next_page.php. Now visit first_page.php and click the "Next Page" hyper like, you will get something like this:

Query string of the incoming URL: PHPSESSID=meml483hk4dvm1n2ii8k9hvjj1
Cookies received:
Value of MyLogin has been retrieved: FYICenter
Value of MyColor has been retrieved: Blue

Base on the output, your PHP engine is using URL parameters to transfer session IDs, because you can see the session ID parameter in the query string of the incoming URL, and there is no cookies related to session ID.

Another way to confirm that your PHP engine is using URL parameters to transfer session IDs is to look at the address field of your browser, it will show something like:

http://localhost/next_page.php?PHPSESSID=meml483hk4dvm1n2ii8k9hvjj1

⇒Understanding and Using Sessions in PHP

⇒⇒PHP Tutorials

2016-10-25, 804👍, 0💬

Using Cookies to Transfer Session IDs in PHP
How To Force the PHP Engine to Use Cookies to Transfer Session IDs in PHP? If you want to force your PHP engine to use cookies to transfer session IDs instead of URL parameters, you can open the PHP configuration file, php.ini, and make the following changes: session.use_cookies = 1 session.use_only... 2016-10-25, 800👍, 0💬

Retrieving Session ID from the Current Session in PHP
How To Retrieve the Session ID of the Current Session in PHP? Normally, you don't need to know the session ID of the current session. But if you are interested to know the session ID created by the PHP engine, there are two ways to get it: Calling session() function. It will return the session ID va... 2016-10-26, 713👍, 0💬

Security of Storing Session ID as a Cookie in PHP
Is It More Secure to Use Cookies to Transfer Session IDs in PHP? Is it more secure to use cookies to transfer session IDs? The answer is yes, because attacking your Web site using URL parameters is much easier than using cookies. So if you are the system administrator of your Web server, you should ... 2016-10-25, 696👍, 0💬

Optoins to Transfer Session IDs in PHP
What Are Options to Transfer Session IDs in PHP? Once a new session is created, its session ID must be transferred to the client browser and included in the next client request, so that the PHP engine can find the same session created by the same visitor. The PHP engine has two options to transfer t... 2016-10-26, 681👍, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.