Re: [PHP] closing a security hole on user accounts possible? - confirming accounts - history function

2002-04-03 Thread Andrew Brampton
This comes up on the list again and again. Force the person to logout, so that the session is closed... check the posts in the past week for other suggestions. Andrew - Original Message - From: andy [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 6:16 PM Subject:

RE: [PHP] closing a security hole on user accounts possible? - confirming accounts - history function

2002-04-03 Thread SHEETS,JASON (Non-HP-Boise,ex1)
You could assign a randomly generated confirmation code to the link for example http://yoursitel.com/membershipconfirm.php?user=jsheetsconfirmid=1238D7adfd a Then when the user hits that link have membershipconfirm.php check the database, confirm the user and the confirmid, if it matches remove

Re: [PHP] closing a security hole on user accounts possible? - confirming accounts - history function

2002-04-03 Thread Jason Wong
On Thursday 04 April 2002 01:21, Andrew Brampton wrote: This comes up on the list again and again. Force the person to logout, so that the session is closed... check the posts in the past week for other suggestions. It was the very same Andy who asked a similar question last week :) --