[ic] Best Practice Use of mv_session_id and mv_pc ??

Peter peter at pajamian.dhs.org
Wed Oct 18 23:23:44 UTC 2017


On 19/10/17 10:40, IC wrote:
> Is it still recommended for urls to have session ids and mv_pc numbers or is
> recommended to completely turn them off?

That's entirely up to you.  Nowadays there is hardly any site that will
work without cookies (and javascript for that matter) enabled, but there
has been a push of late for people to disable cookies for privacy
reasons, so you may still have issues with it.  If you're concerned then
the old standard demo settings should suffice:
ScratchDefault  mv_no_session_id  1
(implicit): ScratchDefault  mv_no_session     0

With the above settings Interchange will only add an id to the URL if
the browser did not pass a MV_SESSION_ID cookie.

I think it's safe to get rid of the mv_pc alltogether.  Stock
catalog.cfg has had it thus for years and I haven't heard of any issues
with browsers caching old IC pages:
ScratchDefault  mv_no_count       1

> I realised that we have quite a lot of links that aren't generated using the
> area tag

This is a bad habit and should be fixed.  There are other very good
reasons to use the area tag other than just generation of mv_pc and id
attributes.  If you explicitly want a link without those attributes then
you should still use the area tag and pass no_session=1 to the tag.


Peter



More information about the interchange-users mailing list