Can I stop people with "cookies" disabled from login in ?

[mihai11]

This would be useful for me because I developped some modules and passing session ids all the time seems like a problem.

Experienced web masters should first answer another question: should I do it ?!? How many people have cookies disabled ? Do you have any statistics on this ?

Regards,
Razvan

[mihai11]

Somebody ? Anybody ?

[MaestroX]

You need cookies enabled to login to a vbulletin board anyway so I don't see what you would achieve by doing this.

you do not need cookies enabled on vBulletin... filename.php?$session[sessionurl] is parsed in templates when you need to pass it to other pages... if you do not as a template designer, you miss a point...

[MaestroX]

I apologise I miss-answered your question

if you do not as a template designer, you miss a point...

I'm fully aware of ?$session[sessionurl] passing sessions ids

[King Kovifor]

I believe you can use the session table to fetch the session. Would be much easier. But I don't know about the session table.

[mihai11]

Originally Posted by King Kovifor

I believe you can use the session table to fetch the session. Would be much easier. But I don't know about the session table.

If my understanding is correct, the session table only works in conjunction with either cookies or session IDs. In the session table there is all the info I need, BUT from the client side there must be something that identifies the session for a given particular user. That "something" is either "cookie information" or "session ID" embedded in each and single URL the user ever uses on the site.

Now, my problem is like this: I need to call a module with the session hash IF the cookies are disabled. Until now I used the "forum link" features. The problem is that when specifying a link in the "forum link" there is no way to supply a sessions hash in the URL because VB doesn't seem to parse variables inside a "forum link".

For this reason, I am thinking to disable session IDs. If all users would be using cookies then I would not have any problems because there would be no need to pass session IDs in the URL.

Currently, I have 2 dilemmas:
1) Is it possible to disable sessions IDs ? The user should only login if he has cookies enabled.
2) If it is possible, is it wise to do so ? I mean how many users have cookies disabled ?


The third solution (and the best one) would be to modify VB so that it will pass the session ID in the "forum link". The problem is that I don't know how this can be done.



Regards,
Razvan M.