[PHP-DB] $_SESSION issues - possible security hole?

I have built an application where users have to log in (the user data is stored in MySQL). I have 3 levels of rights for users; 1-normal rights, 2-admin rights, and 3-super user rights. When a user logs in, I set the $_SESSION['rights'] variable accordingly so I can reference it thru out the site.

Re: [PHP-DB] $_SESSION issues - possible security hole?

Thanks for your thoughts. To answer your first question, I'm using extract() because this is a page where admins and super users can edit the permissions of others for the site. Therefore, I have to query the database to create a listing of all users, and then have the admin/super user select one

Re: [PHP-DB] $_SESSION issues - possible security hole?

']? - ?=$row['user']? ? Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Darron Butler wrote: Thanks for your thoughts. To answer your first question, I'm using extract() because this is a page where admins and super users can edit