note 7718 deleted from Session handling functions by sniper
| From: | sniper@php.net | Date: | Mon, 02 Jul 2001 09:59:45 +0000 |
| Subject: | note 7718 deleted from Session handling functions by sniper | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-14888@lists.php.net to get a copy of this message | ||
I've been studying session documentation and they appear to be able to assist with solving a
number of problems related to the stateless nature of the http protocol, in particular, the
following two areas;
i) Security
Ensuring all MySQL inserts are performed by authenticated users only based on $user $pswd &
$remoteipaddress.
ii) Avoiding duplicate MySQL (or other db) inserts
users are likely to click on the back or reload buttons, if they have not received a page telling
them that their insert has been succesful. If they do this and try to 'repost' data that
has already been inserted an error should be raised.