Justtechjobs.com Find a programming school near you






Online Campus Both


php3-list | 200003

[PHP3] cookies and proxy servers From: Adam Powell (adam <email protected>)
Date: 03/01/00

Hi there, I mentioned this to the list a while ago but it never got
resolved, so I am wondering if anybody has experienced the same problem with
cookies that I am...

Basically I set a login/password cookie, encrypting the password, so that
the command used to set the cookie looks like this :

SetCookie("userpass", $username.crypt("$password", "sl"), time()+36000, "/",
".domain.com");

(forgive me if I have the parameters in the wrong order as I am doing this
from memory but you get the gist of what I am trying to do!).

Now the problem is that two people on my site from the same ISP are
mistakenly logging on from each other. For instance I will get an email
saying 'I logged on and saw somebody elses username', tracing both usernames
back they are both from earthlink, or both from AOL. I guess the cookies
are being cached by the proxy servers, so people are getting each others
encrypted passwords and being able to log on as each other.

Has anybody experienced this behaviour? Also, is there anything I can do to
have a more secure login method using cookies?

Thanks,
Adam 

-- 
PHP 3 Mailing List <http://www.php.net/>
To unsubscribe, send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest, e-mail: php3-digest-subscribe <email protected>
To search the mailing list archive, go to: http://www.php.net/mailsearch.php3
To contact the list administrators, e-mail: php-list-admin <email protected>