Re: [PHP] disabled cookies and sessions

2002-06-08 Thread Nick Wilson

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


* and then Chris Sechiatano declared
 You have to code the PHPSESSID into your URL if your browser has cookies
 disabled or else it won't work.

No. As I said, i have php compiled with --enable-trans-sid

- -- 
Nick Wilson //  www.explodingnet.com



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9AbANHpvrrTa6L5oRAr7xAKCygTDnlygZpepWQf1iwojVzld2LgCcCllO
QGC9nkE6Gb7NLL6V9IzzcTg=
=U8TD
-END PGP SIGNATURE-

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] disabled cookies and sessions

2002-06-08 Thread Giancarlo Pinerolo

Nick Wilson wrote:
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 * and then Chris Sechiatano declared
  You have to code the PHPSESSID into your URL if your browser has cookies
  disabled or else it won't work.
 
 No. As I said, i have php compiled with --enable-trans-sid
 

Php session work differently from PHPLIB.
PHPLIB will generate a session, if no cookie and no SID in URL is found,
then append it to the URL and redirect you there. In this situation,
phplib used to accept and adopt any SID in the url, if there was one.
Now no more: phplib will accept a session in the url only if it exists.

PHP session don't quite work the same. if no cookie nor SID in url, you
have to provide it in the URL, and it will be the session. In fact, if
you provide it in the url, it will adopt it and create it even if you
have cookies enabled! Great feature for spies.

Gian


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] disabled cookies and sessions

2002-06-07 Thread Nick Wilson

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi everyone

I have compiled php with --enable-trans-sid but when I diable cookies on
my brower (Mozilla 1) the obeject I'm trying to pass (eg: its
properties) are not bein passed.

I've used sessions a lot so I'm sure it's not my php at fault but
something is eluding me? Any help much appreciated.

Cheers
- -- 
Nick Wilson //  www.explodingnet.com



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9AOBMHpvrrTa6L5oRAlrHAJsFxqiqk2Oz6RL9P93IERwCfgSoYACfdyh2
+U3Pxm88E/WmpGkujjzaAs4=
=ywLb
-END PGP SIGNATURE-

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] disabled cookies and sessions

2002-06-07 Thread Glenn Sieb

On 06:33 PM 6/7/2002 +0200, Nick Wilson wrote:
I have compiled php with --enable-trans-sid but when I diable cookies on
my brower (Mozilla 1) the obeject I'm trying to pass (eg: its
properties) are not bein passed.

I've used sessions a lot so I'm sure it's not my php at fault but
something is eluding me? Any help much appreciated.

Sessions are cookies.

Glenn


---
Glenn E. Sieb   See us at NetSec! June 18-19
System AdministratorHyatt Embarcadero, San Francisco
Lumeta Corporation  http://www.lumeta.com/Events/events.html
+1 732 357-3514 (V)
+1 732 564-0731 (Fax)


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] disabled cookies and sessions

2002-06-07 Thread Nick Wilson

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


* and then Glenn Sieb declared
 I have compiled php with --enable-trans-sid but when I diable cookies on
 my brower (Mozilla 1) the obeject I'm trying to pass (eg: its
 properties) are not bein passed.
 
 I've used sessions a lot so I'm sure it's not my php at fault but
 something is eluding me? Any help much appreciated.
 
 Sessions are cookies.

Yes, but they get passed via the host machine and propagated using the
PHPSESSID=sdlkff thingy in the url. That's the point, sessions are
supposed to be independent of weather the user has disabled cookies.
- -- 
Nick Wilson //  www.explodingnet.com



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9AOX7HpvrrTa6L5oRAoyOAJ9S0ftsfAMrOF8pJjQEs6GHl2yTKACfZMBv
NCoMV70tkQJCmeyflEbEzd8=
=InHB
-END PGP SIGNATURE-

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] disabled cookies and sessions

2002-06-07 Thread Chris Sechiatano

You have to code the PHPSESSID into your URL if your browser has cookies
disabled or else it won't work.

On Fri, Jun 07, 2002 at 06:57:31PM +0200, Nick Wilson [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 
 * and then Glenn Sieb declared
  I have compiled php with --enable-trans-sid but when I diable cookies on
  my brower (Mozilla 1) the obeject I'm trying to pass (eg: its
  properties) are not bein passed.
  
  I've used sessions a lot so I'm sure it's not my php at fault but
  something is eluding me? Any help much appreciated.
  
  Sessions are cookies.
 
 Yes, but they get passed via the host machine and propagated using the
 PHPSESSID=sdlkff thingy in the url. That's the point, sessions are
 supposed to be independent of weather the user has disabled cookies.
 - -- 
 Nick Wilson //  www.explodingnet.com
 
 
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.0.6 (GNU/Linux)
 
 iD8DBQE9AOX7HpvrrTa6L5oRAoyOAJ9S0ftsfAMrOF8pJjQEs6GHl2yTKACfZMBv
 NCoMV70tkQJCmeyflEbEzd8=
 =InHB
 -END PGP SIGNATURE-
 
 -- 
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, visit: http://www.php.net/unsub.php

-- 
Chris Sechiatano
[EMAIL PROTECTED]
www.chris-s.com

PGP Key 0x0021EFA0


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php