Re: Change User on a pconnect

> > By the way, what prevents someone from guessing a persistent link > > identifier and using it without authenticating on it right now? I don't > > see the code that prevents this, but I should take a closer look. I'll > > play with this stuff this afternoon. I'll probably wait until after > > 3.0.13/4.0RC2 before I commit it though to avoid last-second breakage. > > hmm, in PHP 4 the link would be a resource and only c-modules can create > resources. in PHP 3 this could be a problem, and thinking a bit longer > .... i believe every script could guess a link-number - that's not good. Yeah, I was only looking at PHP 3 code where the thing is just an integer. I'd like to verify/fix this before 3.0.13 and will get right on it after lunch here. -Rasmus