On Mar 15, 8:33 pm, Atilla <[EMAIL PROTECTED]> wrote:
> What I can think of the top of my head is writing a middleware that
> replaces all your internal URLs in the output, appending to them the
> session ID variable.

Note that your session IDs will be sent in the referrer header and can
be seen by any external sites you link to.  You might want to use a
view to redirect users to external sites and make it so links to the
redirect view do not contain a session id in the url.  That way,
external sites will see your users came from a page like:

http://www.example.com/app/redirect/?url=http://www.externalsite.com

instead of seeing them coming from a page with session id like:

http://www.example.com/app/sessionid123456

Scott


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to