Re: The Ethics and Access of Login

From: Date: Tue, 29 Oct 2002 05:07:58 +0000
Subject: Re: The Ethics and Access of Login
References: 1  Groups: php.db 
Request: Send a blank email to php-db+get-22768@lists.php.net to get a copy of this message
That's a HUGE security flaw! Anyone could send that in a GPC value and get unauthorized access! USE $_SESSION['login'] INSTEAD!!! Daevid Vincent wrote
Then at the top of each page, just check if they're logged in or not. if( !$login ) { Header("Location: ".$LOGINPAGE."\n\n"); exit; }
-- The above message is encrypted with double rot13 encoding. Any unauthorized attempt to decrypt it will be prosecuted to the full extent of the law.

« previous php.db (#22768) next »