[PHP] Security Question

[Thomas Andersen]

Hello,

I'm trying to develop a secure web based application and my only tools are
php, mysql, and a SSL connection.

Does anyone know of any good references for this kind of development?

What I really need to do is to make sure that given users only gain access
to the parts of the application they are given rights to.  I'm not sure if I
need to pass their user information along from page to page or if I should
set a cookie or whatever else would be appropriate.  I also want people to
be bounced back to the login page if they enter a direct URL to part of the
application without logging in first, and I also want people to be able to
log out.

Thanks,
Thomas Andersen

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Best way to store data.

[Thomas Andersen]

Which ever way is better for you.  That is, what ever is easier when it
comes to retrieving and displaying it again.  Both items will be treated as
text, so mysql won't care.

Thomas

"Philip J. Newman" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi, is the best way to store data in a mysql database in the text it was
submitted, or in HTML
> format ... changing all the \r's and things to 
>
>
> ---
> Philip J. Newman
> Master Developer
> PhilipNZ.com [NZ] Ltd.
> [EMAIL PROTECTED]

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Verifying a url

[Thomas Andersen]

Hi,

My web site has two different ways to be accessed.  One is through a SSL
connection and the other not.

Does anyone know how to check either the URL that is being used (https would
give away the SSL) or if you can check if SSL is being used?

Thanks,
Thomas

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Max GET size?

[Thomas Andersen]

I believe there is a limit on the length of URLs and since GET actually
sends the info through the URL that limit may apply.

Hope it helps,
Thomas


"James E Hicks III" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> I've seen the post_max_size in the php.ini. Is there a corresponding
> get_max_size? I couldn't find anything about this anywhere in the php.ini
or
> apache.conf.
>
> I want to send a lot of information via
> header("Location: http//server.com/program.php?val[]=1")
>
> Is there any limit on size of GET method?
>
> James Hicks

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Calling cgi post form from within php

[Thomas Andersen]

Hi,

does anyone know how to call a cgi script and pass along a post-form from
within php?

Thanks,
Thomas

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Calling cgi post form from within php

[Thomas Andersen]

a little extra info.  This is a remote script located on another server.  I
will then get a return value for error checking purposes.

Thomas

"Thomas Andersen" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi,
>
> does anyone know how to call a cgi script and pass along a post-form from
> within php?
>
> Thanks,
> Thomas

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Calling cgi post form from within php

[Thomas Andersen]

Thanks for your help guys, I got it working.

Thomas


"Thomas Andersen" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi,
>
> does anyone know how to call a cgi script and pass along a post-form from
> within php?
>
> Thanks,
> Thomas

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php