RE: How to send a SID in a security way - SOLVED!!!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andre,
Did you intend to write that both sessions have the same name? Doesn't 
that result in the same issue with the session identification?
dave





"Andre Matos" <andre.matos@xxxxxxxxxxxx>

10/22/2004 03:25 PM



 

To:
<php-db@xxxxxxxxxxxxx>
cc:





Subject:
RE:  How to send a SID in a security way - SOLVED!!!



Hi list,

Thanks for all people who tried to help me in my "session" problem.

I have found a simple and easy way to have to web-based php applications
running in the same server and having one user using both on the same web
browser (two different windows or tabs).

I did this in one system:

session_name("System1");
session_start();


and this in the another system:

session_name("System1");
session_start();


Now I can have my two applications running in the same browser at the same
time.

Thanks for all help that I received!!!

Andre

--
Andre Matos
andre.matos@xxxxxxxxxxxx 

-----Original Message-----
From: Andre Matos [mailto:andre.matos@xxxxxxxxxxxx] 
Sent: Friday, October 22, 2004 12:59 PM
To: 'Matt M.'
Cc: php-db@xxxxxxxxxxxxx
Subject: RE:  How to send a SID in a security way

Hi Matt,

I am trying to solve my problem to have one browser accessing two 
different
applications (each one in a different window) where each application has 
its
own and unique sessionID. I really don't want to use cookie because I will
need that the user enable the option "accept cookies" in the browser.

However, I am afraid to pass the sessionID on the URL because someone can
cat it.

I am using currently using SSL.

Can you see any solution for my problem?

Thanks.

--
Andre Matos
andre.matos@xxxxxxxxxxxx 

-----Original Message-----
From: Matt M. [mailto:h.dudeness@xxxxxxxxx] 
Sent: Friday, October 22, 2004 12:35 PM
To: Andre Matos
Cc: php-db@xxxxxxxxxxxxx
Subject: Re:  How to send a SID in a security way

> How can I send a SID (SessionID) in a security way from one page to
another?
> Is it "security" to do this?

not sure what exactly you want.  You could just use cookies, dont
allow it to be in form fields or query strings.

you could use ssl.

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[Index of Archives]     [PHP Home]     [PHP Users]     [Postgresql Discussion]     [Kernel Newbies]     [Postgresql]     [Yosemite News]

  Powered by Linux