Do you need to add the sessionurl to every link?
It looks like mod authors do not use it on links within their mods. Does it have good reason or did they forget it?
I think that some vb links do not have sessionurl either, eg the archive link in the footer. Why does that link not have the sessionurl?
How about links to external scripts? I assume it is incorrect to put sessionurl to those links, right? How about links to bridged scripts? I have bridged vb to coppermine gallery and coppermine checks if a user has logged into vb. Since using cookies had some issues, the bridge now extracts the session directly from the vb table.
|