RE: [PHP] User authentication
| From: | Dan Joseph | Date: | Thu, 02 Oct 2003 20:36:03 +0000 |
| Subject: | RE: [PHP] User authentication | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-164824@lists.php.net to get a copy of this message | ||
Hi,
> Then when any new page loads it first checks to see if the user has a
> "CanEdit" value of "1", if not it boots them back to the page they came
> from, if so it runs a query to check their idle timestamp and subtrack
> it from the current unixtimestamp to find the difference. If it's
> greater than X they are booted back to the login screen, if it's less
> than X the page is loaded..
>
> Anything look wrong or insecure with all of this?
This is how I'm doing it. We had it auditted by a security company. It
passed with flying colors.
-Dan Joseph