RE: [PHP] Passing vars w/refresh w/register globals off?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 you could save the password to a database, associated with an ID number, then pass the ID number. DATABASE: - ---------------- id | password 12345 | blah$$ URL: form.php?id=12345 - ---------------- Scott Hurring - Internet Programmer GraphicType Services tel: 973.667.9486 web: http://www.graphictype.com/ pgp: http://graphictype.com/scott/pgp.txt - ---------------- > -----Original Message----- > From: Floyd Baker [mailto:fbaker@olm1.com] > Sent: Thursday, January 17, 2002 1:36 PM > To: Jason Wong > Cc: php3@lists.php.net; php-general@lists.php.net > Subject: Re: [PHP] Passing vars w/refresh w/register globals off? > > > On Fri, 18 Jan 2002 01:03:19 +0800, you wrote: > > >On Friday 18 January 2002 00:41, Floyd Baker wrote: > >> On Thu, 17 Jan 2002 07:06:50 +0200, you wrote: > >> >What do you mean by 'hidden'? If you're talking about a hidden form > >> >input, how can it not be post? > >> > > >> >Bogdan > >> > >> Just saying I've tried it. Figured it wouldn't work but wasn't sure > >> how 'refresh' might relate to 'post'. Post passing works fine > >> with > >> $_request on the other end but I've got a lot of this refresh kind of > >> passing that doesn't work, and not sure how best to fix it. > >> > >> I don't want to rewrite the entire method to not include refresh. :-< > > > >If they are refresh redirects as in using the META tags then you're not > >going to get any form (POST) data. Perhaps you can elaborate on what you're > >trying to do. And if appropriate, post some code. > > > > > >-- > >Jason Wong -> Gremlins Associates -> www.gremlins.com.hk > > > >/* > >Sorry, no fortune this time. > >*/ > > > Jason. > > The thing is, I *was* using GET in the refresh line and I guess I > wasn't saying that. Moreover I want to pass passwords in the same > transfer but obviously letting them show up in the url is not cool... > > My question should be more like, how can one pass variables in a way > that doesn't use a form but is still secure? > > > And thanks too for asking. I hope everyone understands that even > questions make it easier for a person to focus their thoughts. I hate > to ask dumb questions, or put things the wrong way, but the problem is > I don't know they're dumb at first. One little question I didn't > think to ask myself can make it all come clear. > > Floyd > > -- > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBPEccKsaXTGgZdrSUEQIFuwCfZOI5Ct1iozF86nS3/MziIRo6UlMAoIUb qZV9tkmSWBOXkiqBkE5TwfFe =qb1c -----END PGP SIGNATURE-----