Who will use php session against cookies ??

[Sharg]

Well not I.
Having to relog each time I visit the board is lame and seems like a step backward.

Benj

[Mike Sullivan]

I believe that's a bug :)

[Wayne Luke]

I don't have to relog every time. Never had to log in since I created my account.

Hmmmmm.

[Mas*Mind]

How save is it btw? The sessionhash is sent through the URL, can't other users pick it and get your identity or is there a check made in combination w/ the cookies?

[Mas*Mind]

And what if you wanna provide someone with a thread-url? Your sessionhash will be in it (or you'll have to remove it manually) Will the user get an error because he tries to access a thread w/ someone else's s'hash?

[bira]

Barnes and Noble use sessionhash.

One day, me and a colleague were searching for various books while chatting online. He gave me a link, I gave him, etc. When we came to the point where we wanted to finalise our buy, our shopping baskets included items from the other's basket.... :)

Point of story: sessionhash are problematic, especially because of what Mas*Mind is saying.

Personally, I will use cookies only. I've never had anyone complain to me about the fact that we request cookies to be enabled, and so I've never seen a need to find an alternative for it.

[Sharg]

It would be good that the 2.0 demo uses cookies so we can test it...since most of use will use them.

Benj

[Menno]

it might even be better if users could choose what they prefer. Users with disabled cookies could choose for a session, and cookie users just get cookie

[Sharg]

So will sessionhach remove a bit of load on server since it has database hit less ?

Benj

[Freddie Bingham]

Yes benj that is the whole point!

Also sessions are in the code and you aren't going to be able to pick whether or not you use them.

[chrispadfield]

so what happens if someone tries to use an old session, is it just given a new one? just makes the url look so messy but never mind..