Session ID's in URL

[GeXus]

I'm looking to install Zen Cart, but one thing I don't want is having session ID's show in the URL, due to security and seo.

Is this posible to remove?

Thanks!

[Ajeh]

The session id shows on the first click and secure pages ...

If you own your own secure certificate you can get this to display on just the first click ...

[GeXus]

Hm, Yeah I have my own certificate, but there is still no way to not display it in the URL? Could I just set the session ID on load?

[Ajeh]

Do you see the session id for more than the one click?

[GeXus]

No, it's just the first click... but I would still prefer to not have it in there.

[dwno]

I started a small mod a long time ago for removing the initial session ID from the query string, but due to lack of response it's been standing still since last december. It first checks if it can set and read cookies and if it can, it redirects to the same url that was used without the session ID in the query string.

Check it out if you're interested:
http://www.zen-cart.com/forum/showth...9392&page=8#74

If you decide to test it, be sure to let me know how it goes by posting in that thread. :) It's only been downloaded about 50 times since then, and I don't know if anybody's even using it. The lack of response from people who've downloaded it could mean that it just works, but it could also mean that nobody is using it.

[gid]

Yeah, I am sick of tracking down bad links to my site due to the zenid. Trying to get a webmaster to modify a link is rarely if ever successful. The thing is that google and the others have almost perfected detecting guids and not indexing them, but users have not and a hard coded GUID creates duplicate content issues.

I believe setting 'Recreate Session' to false alleviates any issues with duplicate shopping carts... correct?

[DrByte]

I believe setting 'Recreate Session' to false alleviates any issues with duplicate shopping carts... correct?

Setting "Recreate Session" to "True" should prevent hijacking of other sessions.