Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Marco Behnke
Am 11.12.2012 20:51, schrieb Peet Grobler: On 2012/12/11 2:46 PM, Paul Halliday wrote: Client <-> Server is encrypted, can I toss these into session variables? Do note your full url (including &user=xx&pass=yy will be logged in apache logs, and depending on configuration in squid logs in-b

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Peet Grobler
On 2012/12/11 2:46 PM, Paul Halliday wrote: > Client <-> Server is encrypted, can I toss these into session variables? > Do note your full url (including &user=xx&pass=yy will be logged in apache logs, and depending on configuration in squid logs in-between too. -- PHP General Mailing List (htt

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:12 AM, Ashley Sheridan wrote: > ** > On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: > > On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan > wrote: > > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > Hi, > > I have a form that has username and passwor

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: > On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan > wrote: > > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > > Hi, > > > > I have a form that has username and password fields. While

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan wrote: > ** > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > Hi, > > I have a form that has username and password fields. While the form > exists and contains various other fields the most common mode of > operation is to have the form

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > Hi, > > I have a form that has username and password fields. While the form > exists and contains various other fields the most common mode of > operation is to have the form auto submit if it has enough arguments > in the URL. So, someone

[PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
Hi, I have a form that has username and password fields. While the form exists and contains various other fields the most common mode of operation is to have the form auto submit if it has enough arguments in the URL. So, someone is using an external program that has links wired as such: test.php