Re: [PHP] Security - Maybe a silly question

2002-11-01 Thread @ Edwin
Hello, SED [EMAIL PROTECTED] wrote: When I use sessions in PHP or just plain login/password in $_POST, can 3rd parties or hackers monitor the transmission, between me and user, and somehow decode the transmission and use the variables to login other time or overtake the current session? Yes.

Re: [PHP] Security - Maybe a silly question

2002-11-01 Thread rija
Yes, Between user and server, everydata pass through DNS, routeur, etc... So if you don't want someone (hackers or FBI of CIA) to decode your data, use SSL server (https://) with certificate- - Original Message - From: SED [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, November

RE: [PHP] Security - Maybe a silly question

2002-11-01 Thread SED
Thank you for the reply, what do you mean by sniffing, do you mean everbody can monitor our browsing? -Original Message- From: @ Edwin [mailto:copperwalls;hotmail.com] Sent: 1. nóvember 2002 21:47 To: SED Cc: [EMAIL PROTECTED] Subject: Re: [PHP] Security - Maybe a silly question Hello

RE: [PHP] Security - Maybe a silly question

2002-11-01 Thread SED
: [EMAIL PROTECTED] website: www.sed.is -Original Message- From: rija [mailto:rija;vatu.com] Sent: 1. nóvember 2002 22:33 To: php; SED Subject: Re: [PHP] Security - Maybe a silly question Yes, Between user and server, everydata pass through DNS, routeur, etc... So if you don't want

Re: [PHP] Security - Maybe a silly question

2002-11-01 Thread @ Edwin
Hello SED, SED [EMAIL PROTECTED] wrote: Thank you for the reply, what do you mean by sniffing, do you mean everbody can monitor our browsing? I'm not really sure how I can answer your question but let me just put it this way. Everybody CAN monitor our browsing but: 1. That doesn't mean

Re: [PHP] Security - Maybe a silly question

2002-11-01 Thread @ Edwin
SED [EMAIL PROTECTED] wrote: I'm not very familiar to this stuff, but if I wanna use https:// do don't I need a key from Verisign (or similar) to make it work? Yes and no. If you're going to use it on a production server, yes. If it's on a test server but you still want to be somehow

Re: [PHP] Security - Maybe a silly question

2002-11-01 Thread Chris Shiflett
SED wrote: When I use sessions in PHP or just plain login/password in $_POST, can 3rd parties or hackers monitor the transmission, between me and user, and somehow decode the transmission and use the variables to login other time or overtake the current session? If so, how likely is for someone