RE: [PHP] You to prevent site hacking by 'pirates' ?

From: Date: Sun, 27 Oct 2002 22:28:57 +0000
Subject: RE: [PHP] You to prevent site hacking by 'pirates' ?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-121625@lists.php.net to get a copy of this message
> I would know what did you think of my method to prevent 'piracy'.. > > I do like this : > > - A Session is made for each user > In the session, put 2 value : a flag "userlogged" and the userId > - In a cookie, I put the session Id and an unique crypted value. If you're using sessions, there is already a cookie with the session id in it. Why are you storing crypted values in a cookie? Why not just add the values to the session and not worry about encrypting it? ---John Holmes.... > > When user go on private parts of the site, > I check the session, the cookie and database fields for the user.. > The crypted data contains some user values (the encryption is done with > mcrypt lib). > > Is it a good way or is there a better way (without SSL)... ? > > Regards, > P.E. Baroiller

« previous php.general (#121625) next »