- Document new session.use_only_cookies ini setting.

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@85450 c90b9560-bf6c-de11-be94-00142212c4b1

reference/info/functions/ini-set.xml

@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.8 $ -->
+<!-- $Revision: 1.9 $ -->
 <!-- splitted from ./en/functions/info.xml, last change in rev 1.23 -->
   <refentry id="function.ini-set">
    <refnamediv>
@@ -682,6 +682,11 @@
            <entry>"1"</entry>
            <entry>PHP_INI_ALL</entry>
           </row>
+          <row>
+           <entry>session.use_only_cookies</entry>
+           <entry>"0"</entry>
+           <entry>PHP_INI_ALL</entry>
+          </row>
           <row>
            <entry>session.referer_check</entry>
            <entry>""</entry>

reference/session/reference.xml

@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.5 $ -->
+<!-- $Revision: 1.6 $ -->
  <reference id="ref.session">
   <title>Session handling functions</title>
   <titleabbrev>Sessions</titleabbrev>
@@ -393,6 +393,16 @@ To continue, <A HREF="nextpage.php?<?php echo SID?>">click here</A>
        side. Defaults to <literal>1</literal> (enabled).
       </simpara>
      </listitem>
+     <listitem>
+      <simpara>
+       <literal>session.use_only_cookies</literal> specifies whether the
+       module will <emphasis role="strong">only</emphasis> use cookies to
+       store the session id on the client side. Defaults to
+       <literal>0</literal> (disabled, for backward compatibility). Enabling
+       this setting prevents attacks involved passing session ids in URLs.
+       This setting was added in <literal>PHP</literal> 4.3.0.
+      </simpara>
+     </listitem>
      <listitem>
       <simpara>
        <literal>session.cookie_path</literal> specifies path to set