Re: Authentication with sessions - Recommendation and suggestions?
| From: | Erik Price | Date: | Thu, 14 Feb 2002 18:58:38 +0000 |
| Subject: | Re: Authentication with sessions - Recommendation and suggestions? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-84790@lists.php.net to get a copy of this message | ||
On Wednesday, February 13, 2002, at 08:51 PM, Harry Yu wrote:
Can anyone give me any suggestions or recommendations? Is there any security concerns? Also, the session files are in a directory that is not world readable.I just set up my own first authentication system, and it works very similar to yours. I think you should turn register_globals off if you really want security. PHP 4.1.0 has some neat shortcuts to make your life easier if you do this. Erik ---- Erik Price Web Developer Temp Media Lab, H.H. Brown pricee@hhbrown.com