HTTP state management without cookies?

[Ng Pheng Siong]

According to Lutz Schroeer  <Lutz.Schroeer at tu-clausthal.de>:
> Seems I missed that thread. After thinking it over I came to the conclusion
> that using cookies is the most practical way. It's a pity, I hoped there
> would have been a different solution, but passing an ID through all my URL
> doesn't really attract me ...or maybe... mmh, I really don't know. I think I
> try the URL-ID method and if I get completely messed up I use the cookies.

In summary, these are the three ways to store session-ids.

1. Use cookies.
2. Use encoded URLs.
3. Use a hidden field.

Take a look at the current snapshot of M2Crypto; the AuthCookie thingy may
help.

Cheers.


-- 
Ng Pheng Siong <ngps at netmemetic.com> * http://www.netmemetic.com