[The Piper]

By reading your post I got kinda worried about this as well. But I just checked the "Who's Online" page on my site, and all of the pages are something like:

http://www.pinkfloydfan.net/t145.html?s=SESSIONHASH

So, apparently, the sessionhash is being passed through the new search-engine friendly page.

BTW, I just tried to update my online.php file with the instructions I found earlier (and posted on the compilation file before), but it didn't work. I was supposed to find this:

$loc=preg_replace("/?s=[a-z0-9]{32}(&)?/","?",$loc);

But only found this, on 2.2.6:

$loc=preg_replace("/\?s=[a-z0-9]{32}(&)?/","?",$loc);

I've tried adding

$loc=preg_replace("/(f)([0-9]+)(/)/","forumdisplay.php?forumid=\2",$loc);
$loc=preg_replace("/(t)([0-9]+)(.html)/","showthread.php?threadid=\2",$loc);
$loc=preg_replace("/&s=[a-z0-9]+/","",$loc);

but then I got lots of errors. No idea of what is going on....