Re: Jumping between HTTP and HTTPS
| From: | Curt Zirzow | Date: | Tue, 22 Jul 2003 15:52:01 +0000 |
| Subject: | Re: Jumping between HTTP and HTTPS | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-156245@lists.php.net to get a copy of this message | ||
* Thus wrote Joel Rees (joel@alpsgiken.gr.jp):
> > if you do sniff the hash, the key, and the session. You will have
> > to get your request in before the key becomes stale,
>
> race, race!
>
> > In most cases the authentication is the first thing done so we're
> > dealing with micro seconds.
>
> Most cases?
>
> Why re-invent the wheel?
Technically at the time the script was written it wasn't inventing the
wheel. This application was born in early stages of php 3. The other
alternatives where using .htaccess protection, or other php packages
that were either bloated or simply insufficient.
Curt
--
"I used to think I was indecisive, but now I'm not so sure."