I don't know of any exploit that can start a session remotely. Only thing I
can recommend is that you modify the default session id to prevent local
hackers from hijacking your sessions (assuming you're on an ISP and not
running your own server). Also you should consider testing those variables
With register_globals off, try this:
Kirk
> -Original Message-
> From: Norman Zhang [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, April 16, 2002 12:15 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [PHP] session_is_registered
>
>
> Sorry. I'm still getting
Sorry. I'm still getting empty output. Are there some global variables that
I must set in php.ini? phpinfo() tells me that I have
register_globals off
Session Support enabled
session.auto_startoff
session.cache_limiter nocache
session.cookie_secure off
Regards,
Norman
"Oliver Be
On Friday, April 12, 2002, at 07:01 PM, Norman Zhang wrote:
> If I have register_globals=off, how do I pass session variables? I tried
> session_register("var1"). session_is_registered("var1") appears
> successful,
> but if I tried to echo the $var1". Nothing shows. How do I pass session
> var
Sorry...I must get some sleep.
Regards,
Oliver
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
On Saturday 13 April 2002 1:19 am, you wrote:
> Sorry it still does not work. Can it be because I have HEADER(Location:
> ...) redirection after the session_registered('var1')?
>
> Regards,
> Norman
Okay,
This worked on my machine, PHP v4.1.2.
Regards,
Oliver
--
PHP General Mailing List (htt
Sorry it still does not work. Can it be because I have HEADER(Location: ...)
redirection after the session_registered('var1')?
Regards,
Norman
"Oliver Beddows" <[EMAIL PROTECTED]> wrote in message
20020412235134.QNTP29761.mta05-svc.ntlworld.com@there">news:20020412235134.QNTP29761.mta05-svc.ntlw
On Saturday 13 April 2002 12:01 am, you wrote:
> Hi,
>
> If I have register_globals=off, how do I pass session variables? I tried
> session_register("var1"). session_is_registered("var1") appears successful,
> but if I tried to echo the $var1". Nothing shows. How do I pass session
> variables?
>
>
8 matches
Mail list logo