I've just noticed that one of my sites is displaying the a php session id at the end of the url, like: ...com/?PHPSESSID=65e9cc7bf996... Code (markup): Is there any way I can prevent this, like using cookies instead of the URL? Sessions are only used to see if the site is in admin mode (passworded) so they shouldn't be needed or visible to spiders or normal visitors. Thanks in advance
include this piece of code into your pages: ini_set('session.use_trans_sid', false); Code (markup): Or you can use it in .htaccess by this code: php_flag session.use_trans_sid off Code (markup):