What are potential pitfalls of relying on session.use_trans_sid in PHP?

Using session.use_trans_sid in PHP can potentially expose sensitive session IDs in URLs, making them vulnerable to being intercepted or stored in browser history. To avoid this security risk, it is recommended to disable session.use_trans_sid and instead rely on cookies for session management. 

// Disable session.use_trans_sid in php.ini or at runtime
ini_set('session.use_trans_sid', 0);

Keywords

session.use_trans_sid security vulnerabilities session fixation attacks cross-site scripting (XSS) session hijacking

Related Questions