$session[sessionhash]
 

I am curiouys as to why the ?s=$session[sessionhash] is added on to the end of the links in your header button bars? Why can't you just have forum.php instead of forum.php?=$session[sessionhash]

I may be wrong but isn't this what tracks where the person is for who's online?

The reason I am asking is because I just installed PhotoPost and I was told to take all the ?s=$session[sessionhash] out of the links because it was not needed and it would not work properly with them in there?

Actually, it's more important than you think. It tracks sessions for anyone who opts to have their sessions tracked via query strings rather than via cookies.

If it is that important then why did Scott at Photopost tell me to take it out?

I only took them out of my headers in Photopost. I still have them everywere else. When I have them in my headers in Photopost and I click one of them. For example FORUM then the following shows up in my address bar after it loads the forum.

http://www.mydomain.com/forum/index.php?s=$session[sessionhash]

But when I am anywhere else in my VBulletin and click to go to forums this is what shows up in my address bar.

http://www.mydomain.com/forum/index.php?

If I need to fix this in PhotoPost does anyone know how I do it?

Taking sessionhash off will only affect members who have switched cookies off in their browser, or for some reason cookies don't work for them eg. surfing behind a proxy etc.

FWIW, I've removed sessionhash completely from my own forums (not vB) and it has been working well. Mind you, I've made it so that cookies are compulsory to use the site.

Removing the sessionhash (or hiding it) also allows things like Googlebot to crawl your site. GB ignores URLs with sessionhashes.

How are you hiding it from GBot? I've got a few ideas in mind.. in global you check the IP, compare to the bot ips, and if so, strip the hash? Do you care if it has the .php?s= or do you get rid of that as well? Please share :)

I'm using fake flat files so it does't know the difference. All links that GB shouldn't care about crawling like the user CP have the normal vB URLs.

I know this is an old thread but does this still apply??? Is the same thing???

This kind of applies now.

In vB3 the session hash is no longer displayed when it is not needed, or when bots crawl your forum. We no longer have ?s= tacked on to our urls due to better checking.

The other facts still remain, users without cookies need it to remained logged in.

would it be safe to remove these??? I have noticed on one of the sites that I have worked on a ? on many of the pages.... How can I get rid of this???