Re: [fw-general] Zend Session issues

2007-01-25 Thread depace
Hello Gavin, Thanks a lot for your email. I went through the manual. I was little confused on how to use it or how to combine the methods make the session secure. Well after scratching my head for couple of hours i made one class which uses the zend_session class... below is my class... looking

Re: [fw-general] Zend Session issues

2007-01-24 Thread Gavin Vess
Moving discussion to fw-auth. Hi Depace, Is there a specific section, paragraph, or example that is confusing? For each risk relating to session hijacking and session fixation, a suggestion has been included in the manual to minimize the risk. I've scanned through docs, and added additional

Re: [fw-general] Zend Session issues

2007-01-24 Thread depace
hi is there a good tutorial for zend_session which also shows how to protect against the session hijacking (security)? zf manual is very confusing... and i'm confused how to use it. thankx

Re: [fw-general] Zend Session issues

2006-11-30 Thread Matthew Ratzloff
Ah, ignore my last e-mail. ;-) -Matt - Original Message - From: "Ralph Schindler" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Zend Framework" Sent: Thursday, November 30, 2006 10:27 PM Subject: Re: [fw-general] Zend Session issues we rece

Re: [fw-general] Zend Session issues

2006-11-30 Thread Matthew Ratzloff
06 9:57 PM Subject: [fw-general] Zend Session issues Zend_Session_Core::stop() doesn't appear to properly kill a session. I've implemented a simple login that stores a session variable indicating a login... In order to 'logout', though, using the stop function does not w

Re: [fw-general] Zend Session issues

2006-11-30 Thread Ralph Schindler
Docs are being updated all the time in svn, and these are generated on the 1/2 hour: http://framework.zend.com/wiki/display/ZFDOC/Zend_Session we recently added a destroy() method to Zend_Session, you should take advantage of that for what you are trying to achieve. Stop and shutdown specific

[fw-general] Zend Session issues

2006-11-30 Thread David Rinaldi
Zend_Session_Core::stop() doesn't appear to properly kill a session. I've implemented a simple login that stores a session variable indicating a login... In order to 'logout', though, using the stop function does not work... I have to kill the session myself. Is there supposed to be a different w