Disable PHPSESSID query parameter

[Mindless]

Setting session.use_only_cookies to 1 should disable use of the PHPSESSID query parameter.  Enabling session.use_only_cookies protects against session hijacking when people share links (which is why the default is 1).

Also, when session.use_only_cookies is not enabled, all the URLs on the forum are unique each time a web spider accesses the site (which you can see on archive.org).

Looks like SMF is specifically disabling session.use_only_cookies, so this is probably what needs to change.  (See also: an issue on GitHub about it.)

[namida]

It sounds like there shouldn't be any major issues from simply commenting out that line, so let's give that a try for now. I'll leave it in place for a few days and see if it causes any problems, and if not, I'll make that change permanent.