Thread

While i yesterday was trying to locate possible forum issue, i noticed that even i have cookies only in both settings, my site still writes also session id.
Also i noticed that my sites setting “allow multiple log ins from one account” works even tho i have both settings set to “cookies only” (your quide says it should NOT work when cookies only are set).

I cleared all cookies etc. trying to see if it was in my browsers memory, but no-go, problem still occured after clearing all possible cache, cookies etc.

running now the latest 2.5.3 with latest msm and forums.

thanks for the help.

Hello FinPete,

Thank you for bringing this to our attention.

I have brought this to our Engineers and will post back here when I have some more information for you.

Thank you!

Hi, well ok. I’ll be here waiting. Thanks for the reply so far.

Hi Pete,

This stands out to me:

... i noticed that even i have cookies only in both settings, my site still writes also session id.

Where are you seeing a session ID? ExpressionEngine will set a session cookie regardless of the setting in the Control Panel, but you shouldn’t see the session ID as part of the URL.

Can you clarify that for me?

Cheers,

Hi, its not in the browsers address field, no. When i tried to locate forum issue (what came out as a bug) i just was debugging my site with EE tools. So here is “modified” copy paste from debugging results:

0.0003   UPDATE `exp_sessions` SET `session_id` = '12344565678899asdfgh', `member_id` = 1, `admin_sess` = 1,

while im running my site by “cookies only” in both settings. So do you mean that EE set session ID after all, in all cases?

Yes, EE sets a session ID regardless because you always have a session when you’re logged-in. The preference you’re referring to determines whether EE uses cookies, session IDs in URLs, or both to track logged-in users.