hi all:
i recently installed phpBB (and i've already posted their site about this issue, thread is here )
session ids are showing up in the url...i understand the reason why they are appended (to keep the session going, duh!) and i also understand that mod_rewrite is useful for changing the apperance of urls.
looks like my server has mod_rewrite installed...
mod_negotiation mod_dir mod_imap mod_actions mod_speling mod_userdir mod_alias mod_rewrite sapi_apache2
NOW...do i need to write a rule? anybody have tutorial on how to do this??
also, the behavior on my browser seems very different than the behavior on another user's machine (we both have ie6, he has xp and i have win 98). what's up with that?
this is all very confusing. i'm also wondering just how risky it is to have the session ID appear in the URL in someone's browser?
please help!
