Page 1 of 1

PHPSESSID

Posted: Fri Jan 18, 2008 3:56 pm
by jramaro
I have site pages as (example) index.php , aboutus.php
Today when checking in on the site, Im seeing something that shouldn't be there .

now it has a PHPSESSID string which I never put there.
so now every page from the index.php looks something like:

aboutus.php?PHPSESSID=43634dhdhasjdhdsd

This is happening only on the index page, but again I never set these pages as PHP ids
Is this an exploit happening?

thanks

Re: PHPSESSID

Posted: Fri Jan 18, 2008 7:01 pm
by Christopher
You probably have trans_sess_id set to on. Check you configuration and the manual.