HTTP state management without cookies?

Paul Rubin phr-n2002a at nightsong.com
Wed Feb 20 12:29:35 EST 2002


Geoffrey Talvola <gtalvola at nameconnector.com> writes:
> http://foo.bar/cgi-bin/WebKit.cgi/_SID_=3678268432/MyServlet
> 
> Since the session ID comes _before_ the name of the servlet, all relative
> links work just fine.  WebKit knows how to parse the URL and extract the
> session ID.

Hey, that's clever.  You don't even have to put the session id in the
URL at all.  Just shoot something like

<base href=http://foo.bar/cgi-bin/_SID_=36987348732/>

into the HTML at the top of each page, and all the links will
automatically have the session ID in them.  Use mod_rewrite to map the
SID path component to a query parameter and also to redirect the
request to a URL without the ugly SID in it.



More information about the Python-list mailing list