Re: Security question (newbe)
| From: | Mukul Sabharwal | Date: | Wed, 18 Oct 2000 07:01:27 +0000 |
| Subject: | Re: Security question (newbe) | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-20806@lists.php.net to get a copy of this message | ||
Well....
you could simply check if the person is logged in on
that frame too.....
make that a php page.... and check if the cookie
exists....or whatever you're doing for the session on
the other pages... just put that code over there...
--- Dallas Kropka <dallask@firstworld.net> wrote:
> Please don't crucify me for this,
>
> I have one page that requires a login, as it stands
> now, the login is a PHP page that redirects the user
> to the admin page. The admin page uses 2 frames, a
> navigation frame and a main.
>
> Also, as it stands now, you can simply go to the
> admin page directly, bypassing the login.... this of
> course is bad....
>
> Question1: which method do I use to combat this...
> Sessions, an external variable in a separate file,
> cookies, or some other method?
> Question2: Where can I find a good tutorial for the
> method you recommend?
>
> Thanks, and sorry for the trouble.
>
> Dallask.
>
__________________________________________________
Do You Yahoo!?
Yahoo! Messenger - Talk while you surf! It's FREE.
http://im.yahoo.com/