note 17020 rejected from ref.session by zak
| From: | zak@php.net | Date: | Thu, 22 Nov 2001 13:14:11 +0000 |
| Subject: | note 17020 rejected from ref.session by zak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-21159@lists.php.net to get a copy of this message | ||
If someone has access to www site (PHP) and (on the same server) private home page(PHP) - in private
dir.
If ha know the session name, he can:
- login into www site (form window 1),
- run his own PHP script (window 2 of explorer, from home directory) and manage all the session
vars. Is this right ? How to change it so that only
sites in location xxx can:
session_start()?