session id contributions

[stevennickelby]

Hello all,

 

I have just installed contributions...

 

Session Regeneration

 

http://www.oscommerce.com/community/contri...rch,session+reg

 

And

 

Session Start Mod

 

http://www.oscommerce.com/community/contri...h,session+start

 

I think there the same...we'll can someone shed some light?

 

Session Regeneration...intro

Session regeneration generates a new session id when the customer logs in or creates an account. This contribution eliminates problems with sessions recorded by spiders as the identifier is recreated for visitors during the login/create-account process. It also eliminates problems with duplicate sessions being used by different customers simply because every time someone logins to his account the session ID changes while the cart contents are preserved.

---------------------------------------------------------------------------------

 

Session Start Mod...intro

 

This mod changes the behaviour of osCommerce to stop it from creating a session

until a user goes to log-in or tries to buy a product.

 

The mod has been designed so that you can switch off 'force cookie usage'

in the shop configuration without appending a session ID to the query string.

 

The mod also changes the behaviour of 'add product' and 'buy it now' to move

them out of product_info.php and into their own PHP files.

 

This allows you to use robots.txt to disallow crawlers from hitting the login,

add product, and buy it now pages. What this means is that crawlers can spider

your site without creating a session, and without ever seeing a session ID.

 

It is easy to adapt a current osCommerce page to create a session - just add

one line of code to the top of the pages where you need a session created and

everything should work fine.

 

This mod has information on changing login.php and the add/buy it now sections.

This is all you should need to change unless you have some fancy mods installed.

 

Installation information is in a seperate text file.

------------------------------------------------------------------

[skylla]

In case you are using MS2.2 why not in admin:

 

**disable sessions for spiders

 

**enable regeneration of session IDs

 

Sorry for being ignorant, but what is the exact reason for installing (one of) both contributions?

 

Also, do you have enforce cookies enabled or disabled?

 

have a look at

 

http://www.oscommerce.info/kb/168

[stevennickelby]

In case you are using MS2.2 why not in admin:

 

**disable sessions for spiders

 

**enable regeneration of session IDs

 

Sorry for being ignorant, but what is the exact reason for installing (one of) both contributions?

 

Also, do you have enforce cookies enabled or disabled?

 

have a look at

 

http://www.oscommerce.info/kb/168

 

 

 

This thread got me thinking,

 

http://www.oscommerce.com/forums/index.php?showtopic=200546

 

it works much the same with both so why not!

[♥toyicebear]

This thread got me thinking,

 

http://www.oscommerce.com/forums/index.php?showtopic=200546

 

it works much the same with both so why not!

 

 

They are totally different...

 

 

1. Session Regeneration

 

If you have gotten urls with osc sids indexed or someone has placed a link to your site including the osc sid then this mod will make sure that those comming from those links will not share a session at your site since the id and sid will be recreated upon login/create_account.

 

So this is a fail-safe after the fact contribution.

 

I have not testet this one yet, but enigma1 other contributions so far has been of high standard....

 

2. Session Start Mod

 

This mod aims at stopping the generation of osc sides untill a definite action, like putting an item in cart, takes place at your site.

 

All this to prevent search engines getting sids and someone linking to your site with sids inkluded....

 

Att...this version is a beta version with several bugs...so if you are not proficient in php and can complete it yourself its not recomended.

 

Last but not least, usually you would not need any of the contributions mentioned above... just setting one admin switches correctly is enough to make your site work without having to think about osc sids.

 

in your shops admin under configuration>>sessions set:

 

Prevent Spider Sessions to true

 

and then download and use the lateste version of Updated spiders.txt

[stevennickelby]

They are totally different...

1. Session Regeneration

 

If you have gotten urls with osc sids indexed or someone has placed a link to your site including the osc sid then this mod will make sure that those comming from those links will not share a session at your site since the id and sid will be recreated upon login/create_account.

 

So this is a fail-safe after the fact contribution.

 

I have not testet this one yet, but enigma1 other contributions so far has been of high standard....

 

2. Session Start Mod

 

This mod aims at stopping the generation of osc sides untill a definite action, like putting an item in cart, takes place at your site.

 

All this to prevent search engines getting sids and someone linking to your site with sids inkluded....

 

Att...this version is a beta version with several bugs...so if you are not proficient in php and can complete it yourself its not recomended.

 

Last but not least, usually you would not need any of the contributions mentioned above... just setting one admin switches correctly is enough to make your site work without having to think about osc sids.

 

in your shops admin under configuration>>sessions set:

 

Prevent Spider Sessions to true

 

and then download and use the lateste version of Updated spiders.txt

 

 

Thanks for that....nice and simple!