> <?
> $x = mt_rand (1000,10000);
> $y = mt_rand (1000,10000);
> 
> $text = $x.$y;
> $secretstring =$x.$y;
> 
> session_start();
> if(session_is_registered("secretstring")){
> session_unregister("secretstring");
> }
> session_register("secretstring");

What good do you think this does? There is no 'else' here. If
'secretstring' is registered, you unregister it, and then register it
again in the next line...

Yeah...it's going to be there with each request because register_globals
is probably on and the session value is going to take precedence over
your local value you just calculated for $secretstring because you call
session_start() after it's been set.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to