Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Marco Behnke
Am 11.12.2012 20:51, schrieb Peet Grobler: On 2012/12/11 2:46 PM, Paul Halliday wrote: Client <-> Server is encrypted, can I toss these into session variables? Do note your full url (including &user=xx&pass=yy will be logged in apache logs, and depending on configuration in squid logs in-b

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Peet Grobler
On 2012/12/11 2:46 PM, Paul Halliday wrote: > Client <-> Server is encrypted, can I toss these into session variables? > Do note your full url (including &user=xx&pass=yy will be logged in apache logs, and depending on configuration in squid logs in-between too. -- PHP General Mailing List (htt

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:12 AM, Ashley Sheridan wrote: > ** > On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: > > On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan > wrote: > > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > Hi, > > I have a form that has username and passwor

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: > On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan > wrote: > > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > > Hi, > > > > I have a form that has username and password fields. While

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan wrote: > ** > On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > > Hi, > > I have a form that has username and password fields. While the form > exists and contains various other fields the most common mode of > operation is to have the form

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: > Hi, > > I have a form that has username and password fields. While the form > exists and contains various other fields the most common mode of > operation is to have the form auto submit if it has enough arguments > in the URL. So, someone