RE: [PHP] Re: Session hijacking

2003-10-19 Thread Radek Zajkowski
Behalf Of J. Cox > Sent: October 19, 2003 5:30 PM > To: [EMAIL PROTECTED] > Subject: [PHP] Re: Session hijacking > > > > "Ryan A" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > > NO! Globals are on > > And asking the others t

Re: [PHP] Re: Session hijacking

2003-10-19 Thread Becoming Digital
DXEBBWTYUU - Original Message - From: "J. Cox" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, 19 October, 2003 20:30 Subject: [PHP] Re: Session hijacking "Ryan A" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > NO! Glob

[PHP] Re: DvDanDT->Re: [PHP] Re: Session hijacking

2003-10-19 Thread DvDmanDT
The 'above' would make all items of $_SESSION array into variables... Errm.. $_SESSION["id"] would become $id, $_SESSION["username"] would become $username and so on... Not completely sure this'll work, but most likely as they already exist and you only change their values, so they should remain g

[PHP] DvDanDT->Re: [PHP] Re: Session hijacking

2003-10-19 Thread Ryan A
Hey, Thanks for replying. ** $_REQUEST is a great superglobal, check it out... And at the top of the hijacked script: while(list($tmp1,$tmp2)=each($_SESSION)) $$tmp1=$tmp2; $tmp1=tmp2=NULL; Could work.. :p Can you tell me what the above does please? (am quite a

[PHP] Re: cok->Re: [PHP] Re: Session hijacking

2003-10-19 Thread DvDmanDT
$_REQUEST is a great superglobal, check it out... And at the top of the hijacked script: while(list($tmp1,$tmp2)=each($_SESSION)) $$tmp1=$tmp2; $tmp1=tmp2=NULL; Could work.. :p -- // DvDmanDT MSN: [EMAIL PROTECTED] Mail: [EMAIL PROTECTED] "Ryan A" <[EMAIL PROTECTED]> skrev i meddelandet news:[EM

[PHP] cok->Re: [PHP] Re: Session hijacking

2003-10-19 Thread Ryan A
Hey, > Use an ini_set in your sessions script (I am assuming that you are using a > seperate script to manage your sessions) Not really, I use authenticate for the login, then above each script i have a session_start() throughout the site. Its gotten to be a habit that i start a script with sessi

[PHP] Re: Session hijacking

2003-10-19 Thread J. Cox
"Ryan A" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > NO! Globals are on > And asking the others they tell me that around 20% of the scripts (around > 300 scripts) wont function with globals off :-( > > What to do? Use an ini_set in your sessions script (I am assuming that yo

[PHP] Re: Session hijacking

2003-10-19 Thread Ryan A
NO! Globals are on And asking the others they tell me that around 20% of the scripts (around 300 scripts) wont function with globals off :-( What to do? Please help. -Ryan P.S how can you do this even with globals on? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit