X-Cart forums

[xcell67]

Hi,
Is it possible to hide the XID? I ask this because i currently have 2 test sites, one that is heavily modded and the other is a fresh install. The fresh install doesn't show the XID while the heavily modded one does.

I was looking around at some x-cart sites and most of them show the XID, what I want to know is what causes it to show since my fresh install doesn't show it. Is it something clicked in admin that makes it show the XID?

thanks

[groovico]

It's controlled by the PHP settings on the server or the .htaccess file if your host allows it.

You can turn it off by putting

# turn off sessions
php_flag session.use_trans_sid off


In your .htaccess file.

[xcell67]

this is what my php.ini says:

; trans sid support is disabled by default.
; Use of trans sid may risk your users security.
; Use this option with caution.
; - User may send URL contains active session ID
; to other person via. email/irc/etc.
; - URL that contains active session ID may be stored
; in publically accessible computer.
; - User may access your site with the same session ID
; always using URL stored in browser's history or bookmarks.
session.use_trans_sid = 0

the server already has it off, I tried using that .htaccess that you suggested by the xid is still showing. I don't really mind the xid showing as long as it is safe. I'm just really curious as to why one of my sites show the xid while the other one doesn't while both of them are both on the same shared host account.