this is an option but it will surely break easily. 

I am not completly sure, but i think that sessions variables are write to
the "session handler" at the end of the script. (maybe one of guru's can
clarify this?)

But if this is true consider this:

user 1: is running a script/requesting a page
user 2: is writing to the session variables of user 1
user 1: script is ending and writing the session variables to the session
handler. And writes over the modified session variables.

Jerry Verhoef

-----Original Message-----
From: Dave Brotherstone [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 28, 2001 9:54 AM
To: [EMAIL PROTECTED]
Subject: RE: [PHP] Modify someone else's session register


Not really, but you could...

You would somehow have to get the session id from user 2 to user 3 (this
would depend how your site worked).  Then you could access the session
variables - it depends how your sessions are stored.  If they were stored in
a database, then you could read them (by default they're in /tmp, in a
fairly easy to follow format).  I probably wouldn't recommend changing the
variables in there (/tmp) though - but you could if they were held in a
database.  I believe you can change the "session handler" in order to do
this, but I've never done it.

Dave.

> -----Original Message-----
> From: Alex Vargas [mailto:[EMAIL PROTECTED]]
> Sent: 28 December 2001 02:23
> To: [EMAIL PROTECTED]
> Subject: [PHP] Modify someone else's session register
>
>
> Hi.
>
> Let's suppose I have 3 users in my site, each of them generating their
> respective session variables. Assuming I have a session variable named
> $variable, I'll end up in the server with 3 values: $variable_1,
> $variable_2
> and $variable_3.
>
> My question is: is there a way I can change let's say the variable of the
> second user when the third user is running the php script? Can I
> access (and
> change) the session registers generated by the users?
>
> Thanks for your help,
>
> Alex.
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]


The information contained in this email is confidential and
may be legally privileged. It is intended solely for the 
addressee. Access to this email by anyone else is 
unauthorized. If you are not the intended recipient, any 
form of disclosure, production, distribution or any action 
taken or refrained from in reliance on it, is prohibited and 
may be unlawful. Please notify the sender immediately.

The content of the email is not legally binding unless 
confirmed by letter bearing two authorized signatures.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to