Re: [PHP] Security conundrum ....

2003-06-24 Thread Miles Thompson
Justin, Tks for your reply -- you're partially correct in how it works, and thus far I've not used session id's. Cool. Login is built into the Flash movie and calls a PHP script to authenticate, which returns appropriate success/fail data to the movie. Everything is buried in the Flash movie

[PHP] Security conundrum ....

2003-06-22 Thread Miles Thompson
This does have to do with PHP, but bear with me. We're using a Flash movie, which calls various PHP scripts to authenticate users retrieve news articles, to display a daily business digest. As Flash's printing capabilities are pathetic, we use JavaScript to popup a chromeless window in which

Re: [PHP] Security conundrum ....

2003-06-22 Thread Justin French
Ok, I'm trying to get a grip on what happens here: 1. i visit your site, see a flash movie, which enables me to log-in 2. after i log in, I see a link called news 3. I click on it, which pops open a HTML window through javascript, with a URL like example.com/print_news.php [At this point, the