Re: [PEN-TEST] HTTP Secure Session State Management

["Matt W." <kmx () EGATOBAS ORG>]

um. PHP4 has session_start() / session_register() etc.  This creates a
spiffy little hash table called $SESSION that stores anything you want in
it.  So you can do things like this

$SESSION["login_id"] and then check and see if it's set in all your php
pages to do your session management.

for better examples:
http://www.devshed.com/Server_Side/PHP/Commerce2/page7.html

--------
Matt W.
farm9, Inc.
www.farm9.com

"van der Kooij, Hugo" wrote:

> On Thu, 28 Dec 2000, Drew Simonis wrote:
>
> > "Edwards, David (JTD)" wrote:
> > > To attempt to bring this back "on-topic" a bit :-)
> > >
> > > Has anyone looked at network penetration using WEBDAV/NDSDAV?
> > > Or even seen a security evaluation of WEBDAV/NDSDAV?
> >
> > Also more on topic... Don't PHP4 and MS ASP have some built in
> > session management features?  Has anyone hacked these methods
> > enough to understand what they do?
>
> Can't tell a bit about ASP but PHP(4) does not have anything regarding
> session management.
>
> Hugo.
>
> --
> Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
> hvdkooij () caiw nl        http://home.kabelfoon.nl/~hvdkooij/
> --------------------------------------------------------------
> This message has not been checked and may contain harmfull content.