Enabling session.use_trans_sid INI setting is deprecated

Description

session.use_trans_sid is marked for deprecation. When that directive will be removed, the feature will also be removed. Trans ID are session ID that are propagated via GET (in the URL) and POST (in the HTTP headers).

Example

<?php

if (!ini_get('session.use_trans_sid')) {
    die('it is recommended to not use trans id for sessions.');
}

?>

Solutions

  • Set session.use_trans_sid to off in php.ini.

  • Remove usage of ini_get() with session.use_trans_sid in the code.

  • Remove usage of ini_set() with session.use_trans_sid in the code.