On Tue, Jul 15, 2008 at 8:40 AM, Marty Alchin <[EMAIL PROTECTED]> wrote:
> Is it really
> that bad a thing that users are in control of how they use your web
> site?

Exactly.

Users can change the URL more easily than they can delete a cookie, so
that one is effectively out (for his criteria).  And as you noted, IPs
change and don't really identify any one single user, and thus aren't
a good way to handle sessions at all.

Brett

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to