On my host I found out that after doing a HTTP POST (like loging in or submitting to a poll) the session ID is back in the URL. I added
php_value session.use_trans_sid 0
again to the drupal .htaccess and now I dont see this behaviour anymore.

Should this be in the .htaccess by default?

See also http://lists.drupal.org/archives/drupal-devel/2003-01/msg00241.html

Comments

moshe weitzman’s picture

moshe weitzman commented

i agree that this belongs in default .htaccess. Any reason why thats a problem?

Uwe Hermann’s picture

Uwe Hermann commented
Version: » x.y.z
Status: Active » Fixed

The settings.php file in HEAD contains ini_set('session.use_trans_sid', 0);, so this should be fixed. Please reopen if it's still a problem.

Anonymous’s picture

(not verified) commented
Anonymous’s picture

(not verified) commented
Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)