|
Posted by Gordon Burditt on 11/05/06 10:30
>> If you really want foo.com and www.foo.com to be the same web site,
>> use Apache to redirect any reference to one to the other one.
>>
>
>I dont particularly - that is just how its done in the real world.
>
>PHP is a massive security hazard until such time as it can deal with that
>whether you want to call it a bug or not.
Please explain why this is any kind of security hazard. A site
where you have to keep logging in repeatedly because sessions in
two domains aren't the same would not seem to be a security hole:
in the extreme case where nobody can access anything, there are no
information leaks or ability for anyone to change anything.
Navigation:
[Reply to this message]
|