url.session-id

WarningSEO audit

The page's URL or its internal links carry a session id (jsessionid, PHPSESSID, sid), so every visit creates new URLs for the same content.

What to change

Keep sessions in a cookie, not in the URL. In Java servlet containers, set the session tracking mode to COOKIE; in PHP, set session.use_trans_sid=0 and session.use_only_cookies=1.

The documentation on developers.google.com

A finding of this rule on a page carries the exact edits for that page: the markup it quotes, and what to write instead.

When it runs

Runs on every SEO audit: of a page, a crawl, a build directory or HTML. A warning is a problem that costs a page ranking, clicks or citations. Each finding takes 5 points off the page's score.

The severity here is the rule's usual one: a finding can be raised or lowered when the page gives a reason.

Run it, or skip it

Check a page for this rule alone, after a fix for instance:

npx @rivi-software/agentic-seo-check audit https://example.com --rule url.session-id

Or from an assistant, with the MCP tool seo_audit_page:

{
  "url": "https://example.com",
  "rules": [
    "url.session-id"
  ]
}

To leave it out of an audit, pass --disable url.session-id on the command, or disableRules: ["url.session-id"] to a tool.

All 13 rules