Re: storing passwords in $_SESSION

Hi Dan, Monday, October 10, 2005, 7:43:31 PM, you wrote: > How secure is it to save a password in $_SESSION. > i.e. $_SESSION['password'] > is it safe and is it practical? No, and no (well, not if you want to be safe) More to the point - why would you ever want to? If you've found yourself in a situation where the only option open to you is this, you need to hit the drawing board again and re-design your application. Big time. Cheers, Rich -- Zend Certified Engineer http://www.launchcode.co.uk