Re: RE: Sessions without cookies - Mailing list pgsql-php

From Mitch Vincent
Subject Re: RE: Sessions without cookies
Date
Msg-id 005e01c0d8aa$484d9da0$1251000a@windows
Whole thread Raw
In response to RE: RE: Sessions without cookies  ("Christian Marschalek" <cm@chello.at>)
List pgsql-php
> > Why?  If the user accepts the cookie, then they don't have a
> > problem with it.  If the user doesn't then it uses other
> > functionality (URL re-writing). I don't see any problem with
> > that.  Leave it up to the user to decide how they want PHP to
> > keep track of their session.
>
> Well because cookies are a security flaw, aren't day?

Only if you make them one. :-)

Cookies by in and of themselves are harmless. Just treat what ever you store
in a cookie as if anyone could see it (because they probably can)..

-Mitch



---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster




pgsql-php by date:

Previous
From: "Dan Wilson"
Date:
Subject: Re: RE: Sessions without cookies
Next
From: "Dan Wilson"
Date:
Subject: Re: RE: Sessions without cookies