Re: [PHP] Munging hidden/form variables

[Simon Garner]

From: "Boget, Chris" <[EMAIL PROTECTED]>

> I'm already doing this.  However, if I have a hidden variable containing
> a value of the current user I'm working with, that value can be changed
> to something else and it would pass the test.  However, I need to find a
> way to determine if something like that has happened.  That's where my
> description of what I was thinking of doing came from.
>
> Chris
>


Does the user have a password? You need to check if the password matches as
well.


Cheers

Simon Garner


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]