Re: Protecting Commercial PHP Scripts
| From: | Mark-Walter at t-online dot de | Date: | Thu, 28 Oct 2004 16:38:14 +0000 |
| Subject: | Re: Protecting Commercial PHP Scripts | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-200559@lists.php.net to get a copy of this message | ||
Hi Curt,
> > if ($_SESSION['HTTP_USER_AGENT'] !=
> > md5($SERVER['HTTP_USER_AGENT']))
^^^
$_SERVER *g*
> If your using the same session for IE and netscape, the behaviour
> you are experiencing demonstrates how this can prevent session
> hijacking. Netscape, using its own session should work fine.
nope, it was just a missing underscore :-(
--
Best Regards,
Mark