Description:
------------
In the manual, in the section titled "CXXXVII. Session Handling Functions", (http://us2.php.net/manual/en/ref.session.php), Table 1 says that the default for session.use_only_cookies is "1".

However, later on the page it says that the default for session.use_only_cookies is 0:

"session.use_only_cookies specifies whether the module will only use cookies to store the session id on the client side. Defaults to 0 (disabled, for backward compatibility). Enabling this setting prevents attacks involved passing session ids in URLs. This setting was added in PHP 4.3.0."