Re: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Brian Graham
s, please just ask. > > > > > > > action= > > method=post > > name="login" > > > > > > > > > > > > > > From: Brian Graham [mailto:[EMAIL PROTECTED]] > > > > Sent: 24 June 2002 08:27 > > > &

RE: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Mikey
gt; Subject: Re: [PHP-WIN] Get/Post and Security Issues > > > Here it is. Please note that all of this output from a function; if you > would like the PHP code that outputs this, please just ask. > > > action= > method=post > name="login"

Re: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Brian Graham
June 2002 08:27 > > To: [EMAIL PROTECTED] > > Subject: [PHP-WIN] Get/Post and Security Issues > > > > > > Apache 1.3.26 > > PHP 4.2.1 > > > > When I enter username and password information onto a page, it > > uses Get and > > puts the sessi

Re: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Brian Graham
June 2002 08:27 > > To: [EMAIL PROTECTED] > > Subject: [PHP-WIN] Get/Post and Security Issues > > > > > > Apache 1.3.26 > > PHP 4.2.1 > > > > When I enter username and password information onto a page, it > > uses Get and > > puts the sessi

Re: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Brian Graham
oes the broser have cookies disabled? I know when a session > can't go to a cookie, it goes to the URL. > > -Dash > > -Original Message- > From: Brian Graham [mailto:[EMAIL PROTECTED]] > Sent: Monday, June 24, 2002 12:27 AM > To: [EMAIL PROTECTED] > Subject: [PHP-

RE: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Mikey
Can you send a copy of the HTML form that posts to your function? > -Original Message- > From: Brian Graham [mailto:[EMAIL PROTECTED]] > Sent: 24 June 2002 08:27 > To: [EMAIL PROTECTED] > Subject: [PHP-WIN] Get/Post and Security Issues > > > Apache 1.3.26 >

RE: [PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Dash McElroy
By any chance, does the broser have cookies disabled? I know when a session can't go to a cookie, it goes to the URL. -Dash -Original Message- From: Brian Graham [mailto:[EMAIL PROTECTED]] Sent: Monday, June 24, 2002 12:27 AM To: [EMAIL PROTECTED] Subject: [PHP-WIN] Get/Pos

[PHP-WIN] Get/Post and Security Issues

2002-06-24 Thread Brian Graham
Apache 1.3.26 PHP 4.2.1 When I enter username and password information onto a page, it uses Get and puts the session ID along with the username and the password into the URL, despite my saying "method=post" in the form attributes. This seems like it would be a common problem, but my research isn