The configuration community:
PHP
Information
session.cache_limiter specifies cache control method to use for session pages (none nocache private private_no_expire public). Defaults to nocache. See also session_cache_limiter().
Syntax
Example
Information
session.cookie_secure specifies whether cookies should only be sent over secure connections. Defaults to off. This setting was added in PHP 4.0.4. See also session_get_cookie_params() and session_set_cookie_params().
Syntax
Example
Information
session.use_trans_sid whether transparent sid support is enabled or not. Defaults to 0 (disabled).
Syntax
Example
Information
session.use_cookies specifies whether the module will use cookies to store the session id on the client side. Defaults to 1 (enabled).
Syntax
Example
Information
PHP versions 4.2.3 and lower have an undocumented feature bug that allows you to initialize a session variable in the global scope albeit register_globals is disabled. PHP 4.3.0 and later will warn you if this feature is used by enabling both session.bug_compat_42 and session.bug_compat_warn.
Syntax
Example
Information
session.referer_check contains the substring you want to check each HTTP Referer for. If the Referer was sent by the client and the substring was not found the embedded session id will be marked as invalid. Defaults to the empty string.
Syntax
Example
Information
session.cookie_lifetime specifies the lifetime of the cookie in seconds which is sent to the browser. The value 0 means until the browser is closed. Defaults to 0. See also session_get_cookie_params() and session_set_cookie_params().
Syntax
Example
Information
session.hash_bits_per_character allows you to define how many bits are stored in each character when converting the binary hash data to something readable. The possible values are '4' (0-9 a-f) '5' (0-9 a-v) and '6' (0-9 a-z A-Z -
Syntax
Example
Information
session.entropy_length specifies the number of bytes which will be read from the file specified above. Defaults to 0 (disabled).
Syntax
Example
Information
session.cookie_domain specifies the domain to set in session_cookie. Default is none at all meaning the host name of the server which generated the cookie according to cookies specification. See also session_get_cookie_params() and session_set_cookie_params().


