[PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
Hi, I have a form that has username and password fields. While the form exists and contains various other fields the most common mode of operation is to have the form auto submit if it has enough arguments in the URL. So, someone is using an external program that has links wired as such:

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: Hi, I have a form that has username and password fields. While the form exists and contains various other fields the most common mode of operation is to have the form auto submit if it has enough arguments in the URL. So, someone is

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan a...@ashleysheridan.co.ukwrote: ** On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: Hi, I have a form that has username and password fields. While the form exists and contains various other fields the most common mode of operation is

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Ashley Sheridan
On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan a...@ashleysheridan.co.uk wrote: On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: Hi, I have a form that has username and password

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Paul Halliday
On Tue, Dec 11, 2012 at 9:12 AM, Ashley Sheridan a...@ashleysheridan.co.ukwrote: ** On Tue, 2012-12-11 at 08:58 -0400, Paul Halliday wrote: On Tue, Dec 11, 2012 at 9:02 AM, Ashley Sheridan a...@ashleysheridan.co.uk wrote: On Tue, 2012-12-11 at 08:46 -0400, Paul Halliday wrote: Hi, I

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Peet Grobler
On 2012/12/11 2:46 PM, Paul Halliday wrote: Client - Server is encrypted, can I toss these into session variables? Do note your full url (including user=xxpass=yy will be logged in apache logs, and depending on configuration in squid logs in-between too. -- PHP General Mailing List

Re: [PHP] Storing passwords in session variables

2012-12-11 Thread Marco Behnke
Am 11.12.2012 20:51, schrieb Peet Grobler: On 2012/12/11 2:46 PM, Paul Halliday wrote: Client - Server is encrypted, can I toss these into session variables? Do note your full url (including user=xxpass=yy will be logged in apache logs, and depending on configuration in squid logs