Re: Re: Secure pages

Поиск
Список
Период
Сортировка
От David Olbersen
Тема Re: Re: Secure pages
Дата
Msg-id Pine.LNX.4.31.0103131123200.30154-100000@bubbles.electricutopia.net
обсуждение исходный текст
Ответ на Re: Re: Secure pages  (Michael Fork <mfork@toledolink.com>)
Список pgsql-php
On Tue, 13 Mar 2001, Michael Fork wrote:

->The easiest way in PHP that I have found is to create a file called
->validate.php containing the following:
->
-><?
->  if ($HTTP_COOKIE_VARS["MyCookie"] != 'Some Value') {
->    header("Location: http://my.company.com/login");
->  }
->?>
->
->and, after the user has logged in, set a cookie.  Then, for each page that
->should be for a logged-in user only, just include the validate.php file.

Boy that's not very secure...I could find your included file, see what 'Some
Value' is, and then just make my own cookie!

-- Dave


---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)




В списке pgsql-php по дате отправления:

Предыдущее
От: "Adam Lang"
Дата:
Сообщение: Re: Test
Следующее
От: GH
Дата:
Сообщение: Re: button tag problem