Re: how to not show login info in the url ...what am I looking for?

From: Date: Wed, 10 Dec 2008 15:03:06 +0000
Subject: Re: how to not show login info in the url ...what am I looking for?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-284421@lists.php.net to get a copy of this message
At 9:52 PM +0000 12/9/08, Ashley Sheridan wrote:
Thanks guys and gals!
You shouldn't be passing info like that over the URL; use sessions instead. I saw a shopping cart system once that passed the price of items over the URL, and when I found out and alerted them, we won the contract for a rebuild and then got accused of hacking by their previous web guys (who incidentally built the system!) Ash
Ash: Even if you did hack the site, all that means is that site was hack-able and thus should have been fixed anyway. In my mind, hacking a site (without doing damage) is a good introduction to a client. Cheers, tedd -- ------- http://sperling.com http://ancientstones.com http://earthstones.com

« previous php.general (#284421) next »