Re: getting rid of form variable definition
| From: | scottrus at ipass dot net | Date: | Mon, 03 Jul 2000 10:00:12 +0000 |
| Subject: | Re: getting rid of form variable definition | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-4556@lists.php.net to get a copy of this message | ||
Danny -
Then you want to call unset($reauthenticate) some where after
you complete your auth function.
Side note. Be sure you check that you're pulling in the
POST var $reauthenticate and not something else like the
GET var $reauthenticate. In php4 you can do this:
newauth = $HTTP_POST_VARS["reauthenticate"];
If you don't, a user might pull something like this on you:
http://www.mysite.com/auth_script.php?reauthenticate=username
and PHP would happily fill $reauthenticate with 'username'.
The standard order for var population in php4 is GET, POST, Cookies
iirc.
On Mon, Jul 03, 2000 at 01:40:28PM -0500, Danny Rice wrote:
> Sorry about my lack of clarity, $reauthenticate was set via
> <INPUT TYPE=SUBMIT NAME=reauthenticate VALUE="Change User">
>
> After authentication() I would like the reauthenticate variable to go
> away.
--
Scott