A security thing or just sessions working?
| From: | john at johnallsopp dot co dot uk | Date: | Sat, 24 Apr 2004 11:50:42 +0000 |
| Subject: | A security thing or just sessions working? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-184505@lists.php.net to get a copy of this message | ||
Hi
I had a problem with what my host called "a spate of insecure PHP
applications being used to upload proxying applications" which I think has
been solved, however I've just spotted this when trying to validate my
HTML:
<form action="abc.php4" method="post"><input type="hidden"
name="PHPSESSID" value="aada9a6f795cb72df1ef8b8f61d2715c" /><div
class="secondColThird"><input type="submit"
value="register"></div></form>
The HTML validator wants the <input type> to be within the <div>. Problem
is, I didn't put the <input type="hidden" name="PHPSESSID"
value="aada9a6f795cb72df1ef8b8f61d2715c" /> in there, it's just appeared.
So. Should it be there? Is this just sessions working like they should?
I've never seen it before.
Or have I got Russian Big Boobs all over again :-)
Oh, I just put the site onto a different server on a different host and ..
I've taken another look, I did get the PHPSESSID thing inserted, so I
guess it's standard stuff.
J