RE: [PHP] Session Confusion.

2009-07-22 Thread Yuri Yarlei
Hello For the authentication you can do a form, it will pass the login informations to some class who do the sql validation and put in session the informations of user, but not the password, i prefer put in session because when he close the browser the session will down for 2 , On the first

Re: [PHP] Session Confusion.

2009-07-22 Thread Lenin
Dear Dare, I would recommend you to get the free copy of *chapter 10: Security from Zend Certification Study guide* by Ben Ramsey & Davey Shafik at www.zceguide.com shorter tips: 1. You can apply session_regenerate_id() to prevent *session riding* or *session fixation* 2. You can keep $_SESSION['

Re: [PHP] Session Confusion.

2009-07-22 Thread Bastien Koert
On Wed, Jul 22, 2009 at 1:19 PM, Dare Williams wrote: > Dear Forums, > > Kindly advice me professionally because, am getting more confused on what to > do about my application that needed to be online very soon. > > The fear is about Session and Authentication. > > Here are my questions. > 1.   Mu

Re: [PHP] Session confusion again :( - Thanks!

2004-04-15 Thread Richard Harb
Actually for me it isn't unclear at all: The (super-) global variables are created when php starts working on your script. That pesky function/ini parameter (register_globals=on) is just a replacement for an extract() on each of the global vars just then. Whatever you do later with any of the va

RE: [PHP] Session confusion again :( - Thanks!

2004-04-15 Thread Ford, Mike [LSS]
On 14 April 2004 17:53, Paul Fine wrote: > Thanks guys but I have register globals ON so once the > session variable is > defined I should be able to address it without specifying $_SESSION ? I don't think the documentation is clear on this point -- it may be that the association between the glob

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Chris W. Parker
BOOT on Wednesday, April 14, 2004 12:37 PM said: > But if I want to use $username accross many pages then I will have to > make it a session variable and call it as such on each page like > "$_SESSION['username']" correct. c. -- PHP General Mailing List (http://

Re: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread BOOT
But if I want to use $username accross many pages then I will have to make it a session variable and call it as such on each page like "$_SESSION['username']" Thanks again! "Chris W. Parker" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] BOOT on Wedne

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Chris W. Parker
BOOT on Wednesday, April 14, 2004 12:17 PM said: > So I went and turned them off. Now of course my pages don't work > properly. I guess I have to go through all my code and address the > variables properly ie. $_POST and $_SESSION? no. just assign them at the begin

Re: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread BOOT
Yes in php.ini. I never bothered turning off as (a) I did not take the time to understand the implications and (b) my project is only for internal network use anyway. So I went and turned them off. Now of course my pages don't work properly. I guess I have to go through all my code and address the

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Dennis Gearon
"'Chris W. Parker'" <[EMAIL PROTECTED]> elucidated: Thanks guys but I have register globals ON so once the session variable is defined I should be able to address it without specifying $_SESSION ? WHERE do you have it on? Most sites now have it turned off for VERY valid security reasons. If you

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Paul Fine
Thanks guys but I have register globals ON so once the session variable is defined I should be able to address it without specifying $_SESSION ? -Original Message- From: Chris W. Parker [mailto:[EMAIL PROTECTED] Sent: April 14, 2004 11:48 AM To: BOOT; [EMAIL PROTECTED] Subject: RE: [PHP

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Ford, Mike [LSS]
On 14 April 2004 17:40, BOOT wrote: > Any help with this would be appreciated. the p and v lnames are > posted from a form. In the form, the user seperates last names with a > "/". What I can't understand is why Test1 shows as nothing, while > Test2 shows the value I wanted. Thanks a lot! > > >

RE: [PHP] Session confusion again :( - Thanks!

2004-04-14 Thread Chris W. Parker
BOOT on Wednesday, April 14, 2004 9:40 AM said: > What I can't understand is why Test1 shows as nothing, while > Test2 shows the value I wanted. Thanks a lot! [snip] > $_SESSION['element_countp'] = count($p_lnames); > echo "TEST 1".$element_countp; > > $element_co

Re: [PHP] Session Confusion

2001-03-23 Thread hi
Hi, Just to explain a point on my previous post: If at the top of your page that processes the registration info, you include: session_start(); session_register("is_registered"); is_registered="yes"; and then use this test: if($PHPSESSID) { warning, redirect to login } else { record info, red

Re: [PHP] Session Confusion

2001-03-23 Thread hi
Hi, All the session functions check to see if you have a session running first before starting a session, to prevent you from starting two sessions by accident. If for some reason you want to start another session, you can do that by supplying your own session id to the function session_start()

Re: [PHP] Session Confusion

2001-03-23 Thread KPortsmout
If that's a copy of your code, you might want to check the if($SET=1) line...that will always return true, because you're setting a variable, not checking for equality...should be if($SET==1) instead jack Ooops ok put that bit right, I should really know better :-) but it still doesn`t sol

RE: [PHP] Session Confusion

2001-03-23 Thread Jack Dempsey
If that's a copy of your code, you might want to check the if($SET=1) line...that will always return true, because you're setting a variable, not checking for equality...should be if($SET==1) instead jack -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Fri