Posted by Gordon Burditt on 01/27/07 04:47
> I guess the part where I had a question was where it was absolutely
>required to use session IDs. It seems like it is possible to fill a
>value in $_SESSION['user'] in, say page1.php. Then you go to page2.php,
>and that value is still there. So why try to remember SIDs?
That value is still there *BECAUSE* you've got SIDs to tell you the first
hit is in the same session as the second hit. It's a database key.
>I think I understand the difference between $_POST and $_SESSION,
>thanks for clearing that up.
Navigation:
[Reply to this message]
|