RE: [PHP] Modify someone else's session register

this is an option but it will surely break easily. I am not completly sure, but i think that sessions variables are write to the "session handler" at the end of the script. (maybe one of guru's can clarify this?) But if this is true consider this: user 1: is running a script/requesting a page user 2: is writing to the session variables of user 1 user 1: script is ending and writing the session variables to the session handler. And writes over the modified session variables. Jerry Verhoef -----Original Message----- From: Dave Brotherstone [mailto:davegb@pobox.com] Sent: Friday, December 28, 2001 9:54 AM To: php-general@lists.php.net Subject: RE: [PHP] Modify someone else's session register Not really, but you could... You would somehow have to get the session id from user 2 to user 3 (this would depend how your site worked). Then you could access the session variables - it depends how your sessions are stored. If they were stored in a database, then you could read them (by default they're in /tmp, in a fairly easy to follow format). I probably wouldn't recommend changing the variables in there (/tmp) though - but you could if they were held in a database. I believe you can change the "session handler" in order to do this, but I've never done it. Dave. > -----Original Message----- > From: Alex Vargas [mailto:avargas@estudioav.com] > Sent: 28 December 2001 02:23 > To: php-general@lists.php.net > Subject: [PHP] Modify someone else's session register > > > Hi. > > Let's suppose I have 3 users in my site, each of them generating their > respective session variables. Assuming I have a session variable named > $variable, I'll end up in the server with 3 values: $variable_1, > $variable_2 > and $variable_3. > > My question is: is there a way I can change let's say the variable of the > second user when the third user is running the php script? Can I > access (and > change) the session registers generated by the users? > > Thanks for your help, > > Alex. > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net The information contained in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any form of disclosure, production, distribution or any action taken or refrained from in reliance on it, is prohibited and may be unlawful. Please notify the sender immediately. The content of the email is not legally binding unless confirmed by letter bearing two authorized signatures.