Server Error - Sessid?

[Vranx]

SMF Version: SMF 1.1 RC1
Many of my users keep getting an internal server error. So I sent the error to my host and got this response:

There's a bug in your redirect causing mod_security to trigger:

[Tue Feb  7 13:15:13 2006] [error] [client 198.20.41.198] mod_security:
Access denied with code 500. Pattern match "!^[0-9a-z]*$" at CUSTOM.
[hostname "www.xxxxxxxx.com"] [uri
"/index.php?PHPSESSID=3d605a50c64a27d4f78d009e3feb7b9a;www"]


The ;www part.

It should be this:

http://www.xxxxxxxx.com/index.php?www

So, looks for something that's inserting sessid in the uri.

Where can I find what is inserting the sessid?

[H]

Having problems with mod_security?

[Oldiesmann]

Also tell your host to disable the "session.use_trans_sid" option in php.ini, which will prevent the PHPSESSID string from being shown in the URL (for the most part).