IE6 & per-session cookies

[absynthe]

I don't know if it is my mistake or some bug with IE6 handling per-session cookies, but using W2K SP2, running Apache, when I fully disabled cookies in IE6 parameters and having :
session.use_cookies = 1
session.use_trans_sid = 0
in my php.ini

If I make 2 scripts using session like :

test.php :
<?php
session_star();
$_SESSION['testA'] = "blue";
?>...(some html tags)...
<a href="test2.php">test2.php</a>

test2.php :
<?php
session_start();
?>...(some html tags)...
<?=$_SESSION['testA']?>

As you can see I'm not using <?=SID?> in link to test2.php, session.use_trans_sid = 0 and cookies turned off in browser... Well, I still get $_SESSION['testA'] value (browser print : blue) in test2.php... How come ?!
(even if I relaunch browser, clean tmp/sess..., relaunch Apache... change testA value...)
Any idea ?!
Thanks,
absynthe

[rubric]

You're creating a session variable called testA and a link to test2.php. Inside test2.php is a call to session_start(), therefore it will have access to the session variables. Using cookies or not, the session variables will continue to be passed around to who ever calls session_start(). I don't think session variables are stored on the cookie, so deleting the tmp directory will do you no good. The only thing stored on the cookie is the session id. All other variables are floating around inside your servers memory or in the session directory.

If you want to have a fresh session with test2.php, then reset the session:

$_SESSION = array();

[absynthe]

Well, I know session process in theory.
When you request test.php, session_start() generate a session identifier (32 hexa digits rdm string).
It writes a file with that identifier (like sess_a76d487f.... ) in /tmp on server side to hold session variables.
It sets up a per session cookie (means cookie stand in memory on user side until browser is closed, if session.cookie_lifetime = 0 in php.ini. That per session cookie is never wrote on user disk as regular cookies).
This per session cookie named PHPSESSID (or other name if you use session_name ("something")) holds only the session identifier on user side.
When you request test2.php, identifier is sent to server so it can get session variables that stand in that sess_a76d487f... file, made at first request to session_start().

What I don't understand is how come server can get session variables value in test2.php if browser is set to refuse ALL kind of cookies so no identifier should be passed on request as I don't use SID in url either and session.use_trans_sid = 0 in php.ini. Server should have no way to know which identifier is set with this user but actually it does, because it prints $SESSION['testA'] value in test2.php.
I believe there is some kind of problem with IE6 not abble to refuse per session cookies even with full restriction to cookies.
if I set session.use_cookies = 0 in php.ini (with no SID in URL and session.use_trans_sid = 0) it won't work and test2.php can't catch $SESSION['testA'] value. So it must be using per session cookies some way.
Anyone as a clue ?!