If it's not in the URL it's a start because you are not creating an infinite amount of unique URL's for them to follow.Again, true, but again, to track via cookies, some unique client identifier is needed, which is the SID as well. Having guest SID in any form(in URL or in cookie regardless) won't make sessions table any smaller in case of bots hammering because phpBB will create new session for every new HTTP request.
If the topic marking feature for guests is only thing that requires guest SID then it should be turned off if that feature is not enabled.
Statistics: Posted by thecoalman — Thu Mar 27, 2025 5:54 am