Are there alternative methods in PHP to handle session IDs without impacting HTML validation?

When using session IDs in PHP, the default method of passing the session ID through the URL can impact HTML validation as it introduces query parameters. To handle session IDs without impacting HTML validation, an alternative method is to use cookies to store and pass the session ID. 

<?php
// Start the session
session_start();

// Set the session ID in a cookie
$session_id = session_id();
setcookie('session_id', $session_id, time() + 3600, '/');

// Retrieve the session ID from the cookie
if(isset($_COOKIE['session_id'])) {
    $session_id = $_COOKIE['session_id'];
    session_id($session_id);
}

// Use the session as needed
$_SESSION['user_id'] = 123;

// Destroy the session and remove the cookie
session_destroy();
setcookie('session_id', '', time() - 3600, '/');
?>

Keywords

PHP session IDs HTML validation alternative methods security

Related Questions