Re: Cookies & sessions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



At 8:58 AM +1100 1/22/10, clancy_1@xxxxxxxxxxxx wrote:
On Thu, 21 Jan 2010 08:54:44 -0500, tedd.sperling@xxxxxxxxx (tedd) wrote:

At 12:15 PM +1100 1/21/10, clancy_1@xxxxxxxxxxxx wrote:
On Wed, 20 Jan 2010 20:05:42 -0200, bsfajardo@xxxxxxxxx (Bruno Fajardo) wrote:

  >Well, I hope this information is helpful.

Yes, thanks to everyone who contributed.  I now have a better
understanding of what
cookies are, and have turned on output buffering, enabling me to put
the handler where I
want, and still be able to debug it.

Clancy

One last thing.

I use sessions for the storage of variables I need between pages, but
I use cookies to leave data on the user's computer in case they come
back to my site and want to pick up where they left off.

Both operations store variables, but are for different purposes.

Yes; I'm doing that too. I am setting up a private website, and using cookies to control
access to it.

Clancy

Clancy:

My advise -- don't use Cookies to control access for anything. Cookies are client-side and you should never trust anything coming from the client.

If you want to protect access to a private portion of your site, then require a user id and password. Using Cookies to do that is vary dangerous.

Cheers,

tedd



--
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux