Re: [PHP] Protecting index.php

2006-04-26 Thread chris smith
On 4/26/06, P. Guethlein [EMAIL PROTECTED] wrote: Initial index.php file: ?php if(isset($_GET['d'])){setcookie('disp',$_GET['d'],time()+(60*60*24*60));$_COOKIE['disp']=$_GET['d'];} include_once('writemenus.php'); if(!isset($_GET['href'])) $include = 'startpage.htm'; else { $include =

Re: [PHP] Protecting index.php

2006-04-26 Thread Richard Lynch
On Wed, April 26, 2006 12:53 am, P. Guethlein wrote: ?php if(isset($_GET['d'])){setcookie('disp',$_GET['d'],time()+(60*60*24*60));$_COOKIE['disp']=$_GET['d'];} I suppose this isn't so terribly awful, since experienced users can forge their Cookies as easily as GET, but as a matter of principle,

[PHP] Protecting index.php

2006-04-25 Thread P. Guethlein
Initial index.php file: ?php if(isset($_GET['d'])){setcookie('disp',$_GET['d'],time()+(60*60*24*60));$_COOKIE['disp']=$_GET['d'];} include_once('writemenus.php'); if(!isset($_GET['href'])) $include = 'startpage.htm'; else { $include = $_GET['href']; $include = $include.php;