Justtechjobs.com Find a programming school near you






Online Campus Both


php-db | 2000121

Re: [PHP-DB] Which unique field to track during a PHP4 Session? From: Doug Semig (dougslist <email protected>)
Date: 12/09/00

I'd go with option "4) None of the above."

The only variable you have to pass from page to page is the session ID
variable. The session features of PHP will save/restore your userid and
username variables from either disk or database if you've stored them in
the session data.

Doug

At 05:35 PM 12/9/00 -0700, Jason Dwyer wrote:
>Hi-
>
>I am looking for some security advice with respect to session tracking using
>the PHP4
>built-in session support. Both the Userid and the Username are unique keys
>in my database, but
>only the userid is seen in other related tables.
>
>With this in mind, when tracking user sessions from page-to-page throughout
>my site, what variable is "safest" to
>pass from page to page, so information can be extracted from the database
>when required?
>
>1)userid
>2)username (which is public, seen in message board posts)
>3) one of the above AND the user's password.
>
>Thanks for any hints in this area!
>
>-jason
> 

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-db-unsubscribe <email protected>
For additional commands, e-mail: php-db-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>