Quote:
|
Originally Posted by jg_v7n
You should be able to set the Session ID in a cookie instead of passing it around in the Query String.
|
Yeah, exactly session IDs should be set via cookie, rather on your query strings.
You can have session ids in the URL for certain applications or for admin panel.
There are pros and cons of each method, when you are using Session IDs in URI or cookies. Session IDs when pass through URI can also pose some serious threats to security, thanks to referrer header in the HTTP request.