Re: Re: Trying to make my session code smarter
| From: | Chris Shiflett | Date: | Wed, 17 Dec 2003 16:58:42 +0000 |
| Subject: | Re: Re: Trying to make my session code smarter | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-172890@lists.php.net to get a copy of this message | ||
--- Gerard Samuel <php-general@trini0.org> wrote:
> On Wednesday 17 December 2003 01:33 am, Justin Patrin wrote:
> > You can turn on URL rewriting for sessions. I'm not sure where it
> > is just now....just search the PHP docs.
>
> Yes I know about this feature.
> Unfortunately, its an insecure feature.
You can use GET data, POST data, or cookies. Since these users opt to not
use cookies, and you seem to not want to use GET data, I suppose passing
the information via POST is the only option left. :-)
Hope that helps.
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security Handbook
Coming mid-2004
HTTP Developer's Handbook
http://httphandbook.org/