note 12744 deleted from ref.session by sniper
| From: | sniper@php.net | Date: | Tue, 21 Jan 2003 03:25:37 +0000 |
| Subject: | note 12744 deleted from ref.session by sniper | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-42495@lists.php.net to get a copy of this message | ||
"You then spawn a new browser window (CTRL-N in IE) which keeps the browser session ID the
same, and type in the url for the script"
That means you know the session ID in which case of course you will have access to the session data.
This is a known issue. If you guess the correct session ID, you can get access to that
session's data. Try doing what you say but without spawning a new browser windows that knows
the session ID.