note 58148 added to ref.session

//PROTEC YOUR FILES . Double CHECK User validation login the basic operation login.php <?php //f_login save a session with user and pass $login = f_login($_REQUEST['usuario'],$_REQUEST['clave']); //f_login return a encrypted value if($login) { $_SESSION['login_enc']=$login; }else{ //incorrect user or password. } ?> protected.php <?php //Protected page //check //1 CHECK. user and password //return encrypted session $enc_user = f_encuser($_SESSION['usuario'], $_SESSION['clave']); //2 CHECK the last encrypted login and compare if($_SESSION['login_enc']==$enc_user){ // correct }else{ // incorrect } ?> ---- Manual Page -- http://www.php.net/manual/en/ref.session.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+58148 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+58148&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+58148&report=yes Search -- http://master.php.net/manage/user-notes.php