[PHP] if http_referer is not reliable then how do we ...

Let' say we have a form mailer script, which takes any form ( whose action is directed to it ) and goes thru the submitting form's fields list ( programmatically) , to build a nice email on the fly and email the build up string to the email address that's coming in the hidden field. Let's say that'

[PHP] sql injection protection

I understand some ways are better than others in this one, and it looks like the PDO based implementations shine the most as far as SQL Injection. But would not the following be good enough - without implementing a PDO solution? 1- get the user input 2- for each input, deliberately enforce a data

Re: [PHP] sessions and expirations and isolations

great exp. now I'm heading towards the http://www.php.net/manual/en/session.configuration.php#ini.session.cookie_path. you definitely deserved a good chocolate cookie! On Mon, Jan 16, 2012 at 6:38 PM, Stuart Dallas wrote: > On 17 Jan 2012, at 02:21, Haluk Karamete wrote: > >> Well Stuart, >> >>

Re: [PHP] sessions and expirations and isolations

On 17 Jan 2012, at 02:21, Haluk Karamete wrote: > Well Stuart, > > When I said this > >> In ASP, I create a virtual app at the IIS server - assigning a virtual >> dir path to the app, and from that point on, any page being served >> under that virtual path is treated as an isolated ASP app and t

Re: [PHP] sessions and expirations and isolations

Well Stuart, When I said this > In ASP, I create a virtual app at the IIS server - assigning a virtual > dir path to the app, and from that point on, any page being served > under that virtual path is treated as an isolated ASP app and thus the > sessions are kept isolated and not get mixed up by

Re: [PHP] sessions and expirations and isolations

On 16 Jan 2012, at 22:51, Haluk Karamete wrote: > Hi, in ASP, sessions expire when the client does not request an asp > page for more than 20 min. (The 20 min thing is a server level setting > - which can be changed by IIS settings ) And sessions work out of the > box. > > I use sessions a lot.

[PHP] sessions and expirations and isolations

Hi, in ASP, sessions expire when the client does not request an asp page for more than 20 min. (The 20 min thing is a server level setting - which can be changed by IIS settings ) And sessions work out of the box. I use sessions a lot. So, most likely, I would keep that style in my PHP apps too.