Re: [PHP] a question on session ID and security

2007-05-30 Thread Richard Lynch
On Mon, May 28, 2007 6:46 pm, Davis Chan wrote: > Hi! I am developing a site with some authenticated users only > features. > I would like to know if the following is true: > > 1. script for login process is located on a SSL-enabled server, so > usernames and passwords are encrypted. > 2. upon succ

[PHP] a question on session ID and security

2007-05-28 Thread Davis Chan
Hi! I am developing a site with some authenticated users only features. I would like to know if the following is true: 1. script for login process is located on a SSL-enabled server, so usernames and passwords are encrypted. 2. upon successful login, user is relocated to a non-SSL-enabled serve