On Fri, March 30, 2007 12:13 pm, Juergen Wind wrote:
> Tijnema ! wrote:
>>
>> You can use session within javascript too i believe.
>>
> no, sessions are completely serverside, but you can use js to pass
> variables
> using the query string when sending a xmlHttpRequest.

[pedantic]
Actually, the cookie for a session, if it's using cookies and not
trans_sid, lives on the client, and can (I think) be affected in JS.

One can even store up to 4K of session data *in* the cookie,
sufficiently encrypted with a 2-way encryption with the private key
server-side, and achieve server-neutrality in a server farm, if one is
so inclined.

So it's POSSIBLE for one to architect a system wherein the session all
lives on the client.

If you're willing to expose your entire inner workings of your
application (e.g., it's Open Source anyway, or there's just nothing
worth hiding in the first place) you wouldn't NEED to encrypt the
data.

None of this would be useful in the context of this particular thread.
[/pedantic]

-- 
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to