Re: sessions, SIDs, and php 4.3
| From: | David T-G | Date: | Thu, 13 Nov 2003 22:50:45 +0000 |
| Subject: | Re: sessions, SIDs, and php 4.3 | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-169603@lists.php.net to get a copy of this message | ||
Chris, et al --
..and then David T-G said...
%
% Let me go back over my code and see where I've screwed something up.
That didn't take too long.
I was using SCRIPT_URI instead of PHP_SELF. Ah.
I guess PHP_SELF is my friend and none other. Good enough!
So we have
- use session_start() as usual
- use $_SESSION for everything (setting and unsetting)
- don't bother with session_write_close
- use PHP_SELF
- do NOT hand-code SID with PHP_SELF :-)
as the Golden Rules for sessions. Along with the wonderful world of
validating and filtering input that I'm seeing in other threads, is that
all there is to The One True Way of Session Handling?
%
% %
% % Chris
Thanks a *bunch* for your patience & HAND
:-D
--
David T-G * There is too much animal courage in
(play) davidtg@justpickone.org * society and not sufficient moral courage.
(work) davidtgwork@justpickone.org -- Mary Baker Eddy, "Science and Health"
http://justpickone.org/davidtg/ Shpx gur
Pbzzhavpngvbaf Qrprapl Npg!