Re: again session doubt

From: Date: Sun, 12 Aug 2001 21:37:27 +0000
Subject: Re: again session doubt
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-62345@lists.php.net to get a copy of this message
#1. You *CANNOT* count on session data to be registered by your main FRAMESET before the requests for the sub-FRAMEs are made. Pass any variables you need on the first page through the URLs: <FRAMESET ...> <FRAME SRC=foo.php?username=<?php echo $username;?> ...> <FRMAE SRC=bar.php?username=<?php echo $username;?> ...> </FRAMESET> WARNING: This means that unless you are careful, hackers can surf to sub-pages (foo and bar above) without actually authenticating. Store some info in a database at the top of your FRAMESET page, close the db connection before the FRAME tags, and access it in the foo and bar pages to be sure they're valid. #2. If you want to log somebody out, you'll need to unset() variables and do session_delete() -- WARNING richard@zend.com address is an endangered species -- Use ceo@l-i-e.com Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm Volunteer a little time: http://chatmusic.com/volunteer.htm ----- Original Message ----- From: Balaji Ankem <balaji.ankem@wipro.com> Newsgroups: php.general To: Yamin Prabudy <phplist@pro.net.id> Cc: <php-general@lists.php.net> Sent: Friday, August 10, 2001 3:47 AM Subject: again session doubt Hello! boss, It started session. But i didn't close the session. I tried to login again. But it is giving authorization required. It is not allowing for loggin in again because of session. What i have to do. Thanks and regards -Balu ----- Original Message ----- From: Yamin Prabudy To: Balaji Ankem Sent: Friday, August 10, 2001 12:38 PM Subject: Re: Help required on creating session say you have a form that input the username in the top of the file before the <html> just put the <? session_start(); session_register(username); ?> that's goes the first page... in the next page you can do this <? session_start(); echo $username; ?> you must have you username display there ----- Original Message ----- From: Balaji Ankem To: Yamin Prabudy Cc: php-general@lists.php.net Sent: Friday, August 10, 2001 1:16 PM Subject: Help required on creating session Hi! friends, i also want this feature. Can u tell me how to start a session whenever the user logged in and how to end session after logout. where i have to give these function names... session_start(); session_register(username); Thanks in advance. Regards -Balaji ----- Original Message ----- From: Yamin Prabudy To: php-general@lists.php.net Sent: Friday, August 10, 2001 10:02 AM Subject: [PHP] HELP...session Hi there I need help about session see i have a page (index.php) that used this session_start(); session_register(username); and i got input username after the submit button is click i move into a frame pages...... then in the frame i define again session_start(); for each frame...i got two frame...... i intended to parse the username into my frame...but got nothing i intended to parse the username all over the pages (in frame) until he/she log out can anyone help me with it Thanks in Advance Yamin Prabudy

« previous php.general (#62345) next »