Hide PHP Session ID from URL and COOKIE

Question

I would like to hide the PHPSESSID from the Cookies and also prevent it from being used in the URL as well. My purpose for this is to avoid hacking using the PHPSESSID variable. But I would want my PHP to still utilize sessions.

Answer 1

There are two ways to achieve this.

1. .htaccess

php_flag session.use_trans_sid off

2. php

ini_set('session.use_trans_sid', false);