session.use_trans_sid Question

What are the pros and cons of session.use_trans_sid ON and OFF

Just moved our site from one which had the php.ini, session.use_trans_sid=OFF to
one with it ON

Sure looks ugly having the PHPSESSID showing up for visitors.

Thanks

Al wrote:
> What are the pros and cons of session.use_trans_sid ON and OFF
>
> Just moved our site from one which had the php.ini,
> session.use_trans_sid=OFF to one with it ON
>
> Sure looks ugly having the PHPSESSID showing up for visitors.
>
> Thanks

PRO:
- makes life easier when session cookie isn't an option

CON:
- disables implicit flush for output buffering
- increased risk of session fixation

Others?

--
Teach a man to fish...

NEW? | http://www.catb.org/~esr/faqs/smart-questions.html
STFA | http://marc.theaimsgroup.com/?l=php-general&w=2
STFM | http://php.net/manual/en/index.php
STFW | http://www.google.com/search?q=php
LAZY |
http://mycroft.mozdev.org/download.h...search+plugins

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (Cygwin)

iD8DBQFCOJEFGK7BL3TShWoRAowOAJ9wNWL3UNPFfQDVjK4eQi yzN1uksQCZAeI5
PAuVL6FJ39btyUIutrjqOvY=
=LKQs
-----END PGP SIGNATURE-----