RE: [PHP] Security and register globals

2002-09-30 Thread John W. Holmes
Having recently switched from php 4.0.0 to 4.2.3 I quickly realized the change in variable handling. I still experience problems using the $_POST and $_GET globals so I currently have my register globals ON so I can have the ability to pass variables from page to page without using the $_POST

RE: [PHP] Security and register globals

2002-09-30 Thread ed
Correct! Problem is that I have been given explicit instructions to not use cookies to do this. The only way I can think of doing it without using cokkies is to pass at least one variable from page to page so the scripts know who the user is. Getting them to the user index page with links to

RE: [PHP] Security and register globals

2002-09-30 Thread John W. Holmes
Correct! Problem is that I have been given explicit instructions to not use cookies to do this. The only way I can think of doing it without using cokkies is to pass at least one variable from page to page so the scripts know who the user is. Getting them to the user index page with links

RE: [PHP] Security and register globals

2002-09-30 Thread ed
It would be possible to do this if I then created another table to load their profile data to and use the unique id as the identifier. It would make it alot harder for someone to guess an ID. I would then need a way to flush out their records from the second table when they are finished. Easily

RE: [PHP] Security and register globals

2002-09-30 Thread John W. Holmes
It would be possible to do this if I then created another table to load their profile data to and use the unique id as the identifier. It would make it alot harder for someone to guess an ID. I would then need a way to flush out their records from the second table when they are finished.

RE: [PHP] Security and register globals

2002-09-30 Thread ed
I think I would rather do it using a new table than have to handle sessions. It actually sounds harder to do it this way but I like hard. :) Thanks, Ed On Mon, 30 Sep 2002, John W. Holmes wrote: It would be possible to do this if I then created another table to load their profile data