Security Proposal clarification

This message was sent from: Development
http://forums.oscommerce.com/viewtopic.php?p=149661#149661
----------------------------------------------------------------

Thanks.  BTW - somehow, and I'm not sure why, the PHPSESSID _is_ removed from my URL's when I enable the switch in application_top:

// Use Search-engine Friendly URL's (only works in Apache)
  define('SEARCH_ENGINE_FRIENDLY_URLS', true);

I know this is not suppose to happen, but it does and works fine (eg preserves state).  Go figure   :?