Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Thats... basically what the guy did? He just put the sessionId in the form data instead of a cookie.


> He just put the sessionId in the form data instead of a cookie.

This does not have the benefit of being usable across different tabs or even closing and re-opening the page. Besides, (a minor point) shoving all the state in the cookie makes code simple i.e. don't have use URL params.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: