Re: [PHP] Site Security

2003-11-06 Thread Chris Shiflett
--- Shaun <[EMAIL PROTECTED]> wrote: > How could a cookie be changed maliciously? Cookies are sent by the client, so hopefully that alone illustrates the danger. A cookie's value is not guaranteed to be whatever you asked the client to set. The legitimate users of your site will likely be using a

Re: [PHP] Site Security

2003-11-06 Thread Shaun
"Shaun" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > "Dan Joseph" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > > Hi, > > > > > > > I have created a site that allows users to schedule staff, make > > > appointments > > > etc. Users must log in to use the site a

Re: [PHP] Site Security

2003-11-06 Thread Shaun
"Dan Joseph" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hi, > > > > I have created a site that allows users to schedule staff, make > > appointments > > etc. Users must log in to use the site and the users data is held in the > > Users table of the MySQL database. However, due t

Re: [PHP] Site Security

2003-11-05 Thread Chris Shiflett
--- Shaun <[EMAIL PROTECTED]> wrote: > However, due to the nature of the site I need to make sure it is 110% > secure against hacks etc. Now I know this isn't actually possible That's a very good thing to realize. Security is a measurement, sort of like temperature, so saying something is 100% sec

RE: [PHP] Site Security

2003-11-05 Thread Dan Joseph
Hi, > I have created a site that allows users to schedule staff, make > appointments > etc. Users must log in to use the site and the users data is held in the > Users table of the MySQL database. However, due to the nature of > the site I > need to make sure it is 110% secure against hacks etc.