RE: [PHP] sessions not so secure..solution?

2002-03-19 Thread SHEETS,JASON (Non-HP-Boise,ex1)
[mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 10:03 AM To: PHP List Subject: Re: [PHP] sessions not so secure..solution? On Tue, Mar 19, 2002 at 08:37:43AM -0800, PHP freak wrote: > BUT - it's actually happening often that someone linking to our store > from their own webs

Re: [PHP] sessions not so secure..solution?

2002-03-19 Thread Analysis & Solutions
On Tue, Mar 19, 2002 at 08:37:43AM -0800, PHP freak wrote: > BUT - it's actually happening often that someone linking to our store > from their own website is including the long SESSID in the URL > that links to us, to that everyone who follows that link from > that website is getting the same sh

Re: [PHP] sessions not so secure..solution?

2002-03-19 Thread PHP freak
I came to the PHP list today with the same question/problem. My cart doesn't require cookies. If the user doesn't have them it just puts the SESSID in the URL. (Good ol PHP!) BUT - it's actually happening often that someone linking to our store from their own website is including the long SES

RE: [PHP] sessions not so secure..solution?

2002-03-19 Thread Drew Lopucki
essary (wants to put something in it) the https starts. (?) Drew Lopucki [EMAIL PROTECTED] -Original Message- From: Steve Clay [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 7:13 AM To: PHP-GENERAL Subject: [PHP] sessions not so secure..solution? Hello, I'm building an e

[PHP] sessions not so secure..solution?

2002-03-19 Thread Steve Clay
Hello, I'm building an e-commerce site which uses sessions to hold my $cart object. This works great but I've two worries: 1) When the user connects through our secure hostname, can I ensure the browser will send the server the cookie (w/ SESSID)? The user will shop through domain.com and