On Fri, 2007-05-11 at 22:12 -0700, heavyccasey@xxxxxxxxx wrote: > I don't see you giving a solution. The solution is the same as for any session in which you want to protect data. It hardly needs covering yet again. Read the archives. Cheers, Rob. > > On 5/11/07, Robert Cummings <robert@xxxxxxxxxxxxx> wrote: > > On Fri, 2007-05-11 at 19:59 -0700, heavyccasey@xxxxxxxxx wrote: > > > Set ajaxObject.setRequestHeader("User-Agent","SecretName"); in > > > Javascript and check for it in PHP. Not fool-proof, but the average > > > person wouldn't be able to get in. > > > > Bleh, do it right. Don't settle for half-assed solutions that rely on > > someone being an "average" person. > > -- .------------------------------------------------------------. | InterJinn Application Framework - http://www.interjinn.com | :------------------------------------------------------------: | An application and templating framework for PHP. Boasting | | a powerful, scalable system for accessing system services | | such as forms, properties, sessions, and caches. InterJinn | | also provides an extremely flexible architecture for | | creating re-usable components quickly and easily. | `------------------------------------------------------------' -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php