Re[2]: [PHP] Session Question
| From: | Riza Fahmi | Date: | Thu, 22 May 2003 03:00:26 +0000 |
| Subject: | Re[2]: [PHP] Session Question | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-148493@lists.php.net to get a copy of this message | ||
---Thursday, May 22, 2003, 3:34:27 AM, Ernest E Vogelsinger wrote:
EEV> Keeping a very good eye on session security, sessions are the only thing
EEV> where you can keep login data and access rights, just like you're doing it.
EEV> I would only urge you NOT to use session_register() and
EEV> session_is_registered(), but to use the $_SESSION[] superglobal to be
EEV> absolutely sure you're using only data you yourself have put there, and not
EEV> injected data.
why i must use the $_SESSION[]?
EEV> --
EEV> >O Ernest E. Vogelsinger
EEV> (\) ICQ #13394035
EEV> ^ http://www.vogelsinger.at/
---Riza Fahmi---