April 2026
Intermediate
1009 pages
34h 15m
English
Despite all the advantages that sessions offer, the disadvantages should not be completely ignored.
Especially with cookieless sessions, the discrepancy between convenience and security is huge. It used to be claimed that web applications wouldn't work without cookieless sessions, but nowadays it's more likely that it won't work with cookieless sessions.
The reason for this is very simple: the key to all information, the session ID, is in this case in the plain text of the URL. Imagine the following situation: A webmail provider uses cookieless sessions. You send an email to a customer of the webmail provider with a link to your website, or more precisely, with a link to a PHP ...
Read now
Unlock full access