Re: Security

"Warwick Chapman (Budgee)" wrote: > Using IIS 5 and PHP 4 on Windows 2000 (No A.D.S. yet). > > Should I create a table in the DB with usernames and passwords > and use that - I have played with that already, but still I dunnow > how to stop them from typing the direct URL? I do not know how to > use session variables yet, and I have an idea that they would come > in handy. If you're using IIS, then it's recommended that you implement some HTTP users in your User Manager, and place your "sensitive" scripts in a subfolder on your site... Then in the IIS Management Console, restrict the security of that particular directory to only those users which you designate. That make sense? This way, access to ANY file in that directory would require a login/password, but only on first access within a single session... standard NT/IIS directory security :) > I'm also battling to get the header(); function to work after > submitting a form. I think also a problem which might be solved > using session variables - if you have code which does this, please > may I see it. Can we see some code to try and help you debug? -- Andy Hoffman Web Developer Bristol-Myers Squibb email: andy.hoffman@bms.com