RE: [PHP] Re: Session hijacking

2003-10-19 Thread Radek Zajkowski
> off. Likewise though, you might start looking for replacements for those > scripts as it takes time to make the changes, but it has been a year since > register_globals were turned off by default and mentioned that they were > going away in the future. That is a sound advice, some time ago a lo

Re: [PHP] Re: Session hijacking

2003-10-19 Thread Becoming Digital
You cannot use ini_set() for register_globals. It must be done from .htaccess, httpd.conf or php.ini. http://www.php.net/manual/en/function.ini-set.php Edward Dudlik "Those who say it cannot be done should not interrupt the person doing it." wishy washy | www.amazon.com/o/registry/EGDXEBBWTYUU

[PHP] Re: DvDanDT->Re: [PHP] Re: Session hijacking

2003-10-19 Thread DvDmanDT
The 'above' would make all items of $_SESSION array into variables... Errm.. $_SESSION["id"] would become $id, $_SESSION["username"] would become $username and so on... Not completely sure this'll work, but most likely as they already exist and you only change their values, so they should remain g

[PHP] DvDanDT->Re: [PHP] Re: Session hijacking

2003-10-19 Thread Ryan A
Hey, Thanks for replying. ** $_REQUEST is a great superglobal, check it out... And at the top of the hijacked script: while(list($tmp1,$tmp2)=each($_SESSION)) $$tmp1=$tmp2; $tmp1=tmp2=NULL; Could work.. :p Can you tell me what the above does please? (am quite a

[PHP] Re: cok->Re: [PHP] Re: Session hijacking

2003-10-19 Thread DvDmanDT
$_REQUEST is a great superglobal, check it out... And at the top of the hijacked script: while(list($tmp1,$tmp2)=each($_SESSION)) $$tmp1=$tmp2; $tmp1=tmp2=NULL; Could work.. :p -- // DvDmanDT MSN: [EMAIL PROTECTED] Mail: [EMAIL PROTECTED] "Ryan A" <[EMAIL PROTECTED]> skrev i meddelandet news:[EM

[PHP] cok->Re: [PHP] Re: Session hijacking

2003-10-19 Thread Ryan A
Hey, > Use an ini_set in your sessions script (I am assuming that you are using a > seperate script to manage your sessions) Not really, I use authenticate for the login, then above each script i have a session_start() throughout the site. Its gotten to be a habit that i start a script with sessi