Justtechjobs.com Find a programming school near you






Online Campus Both


php3-list | 199903

Re: [PHP3] Fwd: Passing variables invisable/security From: Jim Winstead (jimw <email protected>)
Date: 03/31/99

Don't pass them. Just pass along some sort of identifier that you
can use to look up the data that you've tucked away somewhere on
your side. PHPLIB (http://phplib.shonline.de/) includes an
implementation of this.

Jim

On Apr 01, Remco wrote:
>
> Hello people,
>
> I'm currently doing some sort of a shop project in PHP, and everything works
> fine, except passing variables between pages secure.
>
> I don't want people to see what variables are passing between pages (and so be
> able to change them in the HTML or URL), but I didn't find any info on how to
> do this. Things like itemnumber, number of the person are needed in various
> pages during the orderingprocess, but can be seen. (and I dont' want it to be)
>
> Thought about the crypt() -function, but when someone knows what he has
> entered and he sees the passed (encrypted) text, the hacker can still
> find out the key and know what's passed and will be able to change these. 

--
PHP 3 Mailing List   http://www.php.net/
To unsubscribe send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest list:  php3-digest-subscribe <email protected>
For help: php3-help <email protected>  Archive:  http://www.php.net/mailsearch.php3
List administrator:  zeev-list-admin <email protected>