Re: RE:[PHP] login scripts not secure?? help!

From: Date: Tue, 23 Mar 2004 17:20:28 +0000
Subject: Re: RE:[PHP] login scripts not secure?? help!
Groups: php.general 
Request: Send a blank email to php-general+get-181286@lists.php.net to get a copy of this message
[snip] Then do what I did, the script below is only an example.. --snip-- <? if ($_REQUEST['dw'] == 0) { session_start() $_SESSION['username'] = ****; //Wherever you got the userid from $_SESSION['password'] = ****; //Wherever you got the password from //if successful header("Location: *****"); } else if ($_REQUEST['dw'] == 1) { //blah blah blah } ?> [/snip] will test it and play with it a little but will it let the admin go from a login required part of the site to a public/free access part of the site i.e. jump out of the session without losing any currently open sessions?? they need to be able to go from the login section (admin only part) to the public part and back to the admin part again without having to login again unless the browser is closed from that site...

« previous php.general (#181286) next »