Re: [PHP] encrypting session variables

2001-07-09 Thread Brad Wright
Tyrone, > Make an MD5 hash using the session variable. Make it again (with the same > seed) before using it, if the hashes don't match, it's been messed with. I'm sorry, I'm not sure what an MD5 hash is. Could you elaborate and/or point me towards some documentation. Thanks, Brad -- PHP Ge

RE: [PHP] encrypting session variables

2001-07-09 Thread Tyrone Mills
Make an MD5 hash using the session variable. Make it again (with the same seed) before using it, if the hashes don't match, it's been messed with. You can store the hash in a MySQL DB, pass it on the URL, write it out to a local file, all kinds of things... -Original Message- From: Brad

RE: [PHP] encrypting session variables

2001-07-09 Thread Chadwick, Russell
$session_id + 1 before passing it, and then $session_id - 1 before using it on the next screen ... thats the security through obscurity way :) you could put the session_id in a mysql db and then select password(session_id) that would return something really obscure and then select session_id w