Re: session issues for unauthorized access?

--- Scott Fletcher <scott@abcoa.com> wrote: > > At some point, the user is going to have to be responsible for his/her > > own actions. After all, I can log into my bank's Web site and then let > > someone else use my computer, and there's no way my bank can prevent > > it. > > Sure the bank can prevent it or otherwise my bank would never use the > website in the first place. My bank doesn't use PHP, it use JAVA and > surprisely, it work very well. I like Warren's idea. Why don't you drop by, log into your bank's Java Web site, and then let me use it. Since your bank can prevent this, you have nothing to worry about, right? :-) Chris ===== Chris Shiflett - http://shiflett.org/ PHP Security Handbook Coming mid-2004 HTTP Developer's Handbook http://httphandbook.org/