note 56574 deleted from ref.session by danbrown

Note Submitter: php at stevegiller dot co dot uk ---- If you want prevent people directly setting, for example, a logged_in session variable to bypass your checks using the url?logged_in=true system, a quick trick is to try the line if (isset($_GET['logged_in'])) { die("Are you trying to take the mickey?"); } before you do anything else. I've not tested this heavily, but I'd value any discussion of its merits and potential flaws ...