Re: Rp.: Re: [Phplib-users] Sessions where are we going??
Brought to you by:
nhruby,
richardarcher
From: Mike G. <Mik...@sa...> - 2002-07-02 16:55:53
|
Donncha O Caoimh wrote: > I think it's probably an idea worth looking at, does anyone else > agree/disagree/care? In my case (and it is possible that I represent many more than just myself), I do care. I have been saving all of the emails in this thread with the intention of taking some time to digest the thoughts being expressed. But we know where the road paved with good intentions goes ;-) -- and I so far have not taken that time. So I cannot argue any of the points with conviction. I will remark that, if in my quick scanning of your email on the topic I understood at all what you were proposing, I believe the idea of a cookie with some very random number as the key should work. I worked on a system a while back which was set up (by someone else) with a similar -- if not the same -- scheme. One of the results was that if one opened another browser and logged into the site one was automatically logged out (i.e. the "session" was lost) of the site on the original browser. They were, however, not using PHP sessions, but a completely home-grown substitute for PHP sessions. Probably not nearly as efficient, but it did have the advantage that they understood (I think) there own system and (perhaps) no one else did... > > > Donncha. > > On Monday 01 July 2002 17:48, Giancarlo wrote: > > Donncha O Caoimh <don...@tr...> a écrit le 1/7/02 > 14:23: > > >Just a thought for an extra > > >layer of protection for the > > >user: > > >The first time the user visits > > >the site we set a cookie on > > >their browser with > > >some very random number > > >as the key. Store the value > > >of the key in the > > >session. > > >Each time after that modify > > >the key, set the cookie, and > > >store it in the > > >session. > > > > That would be heavy on the server. Imagine a multi-frame where each tries > > to lock&write in very rapid sequence... Maybe ok for terminal like > > screens, tellers, mono thread slow stuff. > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Phplib-users mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phplib-users -- _______________________________________________________________________ Michael D Green SaeSolved:: Custom-Built Web Applications -- http://www.saesolved.com 1552 Beachview Drive, Virginia Beach, VA 23464-7225, USA; 757.467.1552 http://www.everypeople.net http://www.sitewidgets.com _______________________________________________________________________ |