Re: Login
| From: | Frank Stanovcak | Date: | Thu, 09 Oct 2008 14:40:50 +0000 |
| Subject: | Re: Login | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-281643@lists.php.net to get a copy of this message | ||
"Wolf" <lonewolf@nc.rr.com> wrote in message
news:4958635.655071223498008404.JavaMail.root@cdptpa-web07-z02...
> <!-- SNIP -->
>> Redirects make sense IMO. IIRC the Yahoo guidelines say not to
>> redirect after a form POST, but unless you have a ka-jillion page
>> views a second (or, "a lot"), then I don't think it's a concern.
>
> Wait, Yahell has guidelines?!?!?
>
> You always have to look at the User Experience. You don't want to annoy
> or p!ss off your users or they will find a site like yours that doesn't
> p!ss them off. If it makes sense to re-direct the user after a successful
> login, then go ahead and do it.
>
> Of course, I don't care if I p!ss off someone who is trying to run
> malicious code on my site or find a hidden piece. Then a redirect to
> ratemypoo seems like a good idea to me!
>
> Wolf
I'd like to take this back to the heart of this message and state that
redirecting malicious usage to ratemypoo seems like a perfectly delightful
means of security.