P3P Compact Policy with Sessions Question

[tkroll]

I want to add my compact policy to pages using PHP sessions. Does the header call:

header('P3P: CP="NON CAO DSP ETC ETC" policyref="/w3c/p3p.xml"');

go before or after this line:

session_start();

If anyone is bored and cares to explain why it goes where it goes, I'd also love to know.

Thank you!

[jollymcfats]

The order of the two doesn't matter. But both do need to appear before you start sending the page to the browser.

[tkroll]

Thanks. That makes sense.