Answer Posted / pankajbisane

1. In your config.php file, put the following code:

<?php

ini_set('session.use_trans_sid', 0);

ini_set(‘session.use_only_cookies’, 1);

?>

This will tell the server to overrule its current insecure
and SEO-unfriendly settings. Unfortunately, most shared
hosting companies don’t allow these modifications using
ini_set. Another method can be used.

2. In your .htaccess file, use the code below:

php_flag session.use_trans_sid off

php_flag session.use_only_cookies on

Place this file in the webroot of your website. It will have
the same result as method 1.

This should do the trick of preventing any ?PHPSESSID to any
new content. But, what to do if you already have webpages
listed in the search-engines with the ?PHPSESSID attached?
Use one of the solutions below:

1. Add the following code to the .htaccess file:

<IfModule mod_rewrite.c>

RewriteEngine On

#remove PHPSESSID

RewriteCond %{QUERY_STRING} PHPSESSID=.*$

RewriteRule .* %{REQUEST_URI}? [R=301,L]

</IfModule>

In order for this to work, the hosting company must have
their PHP compiled with mod_rewrite. If this isn’t the case,
another solution would work similarly

2. Add this code to your config.php file (retrieved from:
http://www.joostdevalk.nl/how-to-get-rid-of-phpsessid-in-the-url-and-redirect/)

<?php

if (isset($_GET['PHPSESSID']))

{

$requesturi =
preg_replace('/?PHPSESSID=[^&]+/',"",$_SERVER['REQUEST_URI']);

$requesturi = preg_replace('/&PHPSESSID=[^&]+/',"",$requesturi);

header("HTTP/1.1 301 Moved Permanently");

header("Location: http://".$_SERVER['HTTP_HOST'].$requesturi);

exit;

}

?>

What is the use of mysql_real_escape_string in php?

910

---

How many ways to include variables in double-quoted strings in php?

1061

---

What does it mean when it says the csrf token is invalid?

903

---

How do you identify independent and dependent variables in regression analysis?

953

---

How to know user has read the email-php?

949

---

List some array functions in php?

936

---

Why overriding is called runtime polymorphism?

983

---

What do you mean range() in php?

1098

---

How can we determine whether a variable is set?

954

---

How stop the execution of a php scrip?

1018

---

what is difference between PHP4 , PHP5

2370

---

What is escaping to php?

973

---

How check submit button is clicked in php?

1036

---

How can we display the output directly to the browser?

990

---

How to read and display a HTML source from the website url?

995

---