CPT John W. Holmes wrote:
From: <[EMAIL PROTECTED]>
Ok this is a major vulnerability that you are coding. Register globals
on and password being stored in the session is like having a banner on
your home page saying 'come and hack me'.
Please explain how you've come to this conclusion...
--
From: <[EMAIL PROTECTED]>
> Didn't know this was the army :-)
Yeah, I signed you up last week. You report to basic training in November. I
hope you're ready! :)
> first unless you got your variable ordering (POST, GET, Env, Sesssion
> etc). the values in the session can be easily overridden with
ling list" <[EMAIL PROTECTED]>
Sent: Wednesday, August 27, 2003 11:24 AM
Subject: Re: [PHP] Cannot pass values from one page to another
Hi,
Ok this is a major vulnerability that you are coding. Register globals
on and password being stored in the session is like having a banner on
your h
using query parameters.
Thanks for the reply
-murugesan
- Original Message -
From: <[EMAIL PROTECTED]>
To: "php mailing list" <[EMAIL PROTECTED]>
Sent: Wednesday, August 27, 2003 11:24 AM
Subject: Re: [PHP] Cannot pass values from one page to another
Hi,
Ok this is
Hi,
Didn't know this was the army :-)
first unless you got your variable ordering (POST, GET, Env, Sesssion
etc). the values in the session can be easily overridden with a simple
old query string. Sure would hate to have my username and password
passed along to each page. remember that when you
From: <[EMAIL PROTECTED]>
> Ok this is a major vulnerability that you are coding. Register globals
> on and password being stored in the session is like having a banner on
> your home page saying 'come and hack me'.
Please explain how you've come to this conclusion...
---John Holmes...
--
PHP
RS because I need to pass the password from one
page to another.
-murugesan
- Original Message -
From: <[EMAIL PROTECTED]>
To: "php mailing list" <[EMAIL PROTECTED]>
Sent: Tuesday, August 26, 2003 7:13 PM
Subject: Re: [PHP] Cannot pass values from one page to another
d" <[EMAIL PROTECTED]>
To: "murugesan" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, August 26, 2003 5:23 PM
Subject: RE: [PHP] Cannot pass values from one page to another
[snip]
I got this value in next page(main.php)
But from there I am not able to pass it
t;
Sent: Tuesday, August 26, 2003 5:23 PM
Subject: RE: [PHP] Cannot pass values from one page to another
[snip]
I got this value in next page(main.php)
But from there I am not able to pass it to next page
I used
session_register('uid');
in main.php
but in next page $uid is returning null
[snip]
I got this value in next page(main.php)
But from there I am not able to pass it to next page
I used
session_register('uid');
in main.php
but in next page $uid is returning null
[/snip]
First, look at the manual for sessions. You have posted many questions
where the manual would have provid
10 matches
Mail list logo
