Re: Tom->Re: [PHP] session hijacking

Hi Tom, A mighty big thanks for that class, I'll read up on classes tonight and try to understand it. Thanks for the tips on how to use it too. > To help prevent problems with stuff like this it is always a good idea to declare > variables before using them, especially with sessions: > > $num = 0; > if(isset($_SESSION['num']) $num = $_SESSION['num']; > > That way $num won't get poisoned if register_globals is on I can do this to all our files without a problem, as only around 10 files actually use sessions in the protected area....(these are the "problem" files) If i declare them before using them like the above example...do you think I still need to use that class? Cheers, -Ryan