Re: The Ethics and Access of Login
| From: | Leif K-Brooks | Date: | Tue, 29 Oct 2002 05:07:58 +0000 |
| Subject: | Re: The Ethics and Access of Login | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-22768@lists.php.net to get a copy of this message | ||
That's a HUGE security flaw! Anyone could send that in a GPC value and get unauthorized access! USE $_SESSION['login'] INSTEAD!!!
Daevid Vincent wrote
Then at the top of each page, just check if they're logged in or not. if( !$login ) { Header("Location: ".$LOGINPAGE."\n\n"); exit; }-- The above message is encrypted with double rot13 encoding. Any unauthorized attempt to decrypt it will be prosecuted to the full extent of the law.