Re: another question about securing and passing variables

•

What is DaniWeb IT Discussion Community?

You're currently browsing the PHP section within the Web Development category of DaniWeb, a massive community of 429,891 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 2,325 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.

Join our community!

Please support our PHP advertiser: Lunarpages PHP Web Hosting

another question about securing and passing variables

•

Join Date: Mar 2008

Posts: 153

Reputation: Suomedia is an unknown quantity at this point

Rep Power: 1

Solved Threads: 19

Suomedia

Offline

Junior Poster

Re: another question about securing and passing variables

Mar 27th, 2008

Instead of using $_GET variables use $_POST. Any such transaction should be over a secure SSL connection. I don't see any reason to be passing username and password at all other than a login page. Once logged in, you should be using $user_id which would be registered in $_SESSION or $_COOKIE.

Matti Ressler
Suomedia

If you want your dreams to come true, the first thing you must do is to wake up....
Suomedia - Dynamic Content Management