Re: Session Authentication
| From: | Martin Marques | Date: | Mon, 09 Apr 2007 16:28:39 +0000 |
| Subject: | Re: Session Authentication | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-252345@lists.php.net to get a copy of this message | ||
Tijnema ! escribió:
On 4/9/07, Martin Marques <martin@bugs.unl.edu.ar> wrote:That would the stupidest thing to do. I can't even imagine somebody thinking about doing it. -- select 'mmarques' || '@' || 'unl.edu.ar' AS email; --------------------------------------------------------- Martín Marqués | Programador, DBA Centro de Telemática | Administrador Universidad Nacional del Litoral ---------------------------------------------------------So what? The user authenticated himself, so what is he gonna crack?Yes, but i guess you're not only storing if the user has authenticated, also storing a username? And if that's not the case, then you could authenticate by creating a cookie where it says authenticated = yes, and you're authenticated...