Hi there, tricky question I have a project which is using Zend_Auth, however when loading a controller via a windows media player plugin in firefox, the netscape plugin will attempt to create its own session cookie requring the session id to be sent in the params to the controller outputting a playlist. How is it possible to securely expose the session id, ie encrypting it and adding as a javascript variable , so it can be sent along with the request to the src of the plugin object code.

Sorry if this might sound confusing here is how the javascript code builds the embed like

src='/videocontroller/k/sessionidhere'

My issue is if its exposed is it possible to add the session cookie into another browser to get around the Zend_Auth login ?

Reply via email to