You are here: Re: Can SID be trusted? « PHP Programming Language « IT news, forums, messages
Re: Can SID be trusted?

Posted by Jerry Stuckle on 10/05/40 12:00

Sebastian Lisken wrote:
> Jerry Stuckle <jstucklex@attglobal.net> wrote:
>
>> I care about my clients.
>
> Okay - I thought I'd detected a slightly different tone in your comments
> here, but a newsgroup post is not a client contact of course.
>
>> But I do make recommendations when they
>> need to change hosts, and tell them why. That's what they pay me for.
>
>> I wouldn't have put all that crap in there in the first place, and I
>> definitely would strip it out. It's just something more which has to
>> be processed and maintained.
>
> Your strong opinion is appreciated. (Seriously.) But like I said, I'm
> not in a position to advocate for a change of hosts. The project is on a
> university server and I'm taking it over at a very late stage.
>
>> But then I also understand what I'm doing before creating "hundreds of
>> occurrences" of something. They pay me to write good code.
>
> Yes, several people have put work in over a few years and the sole focus
> must have been to "get it to work". I'm not saying it was the best choice
> to put "that crap" in, I do see some arguments against this but some
> for it too (see previous post). I wouldn't have done it in the exact
> same way though. I'd be interested to understand better why you feel
> so strongly, which aspect is it you don't like - larger code? You do see
> that the effect of adding SID "manually" is the same as with the option -
> adding a GET parameter only if cookies are disabled - except for an
> unnecessary "?" or "&" in "my" version (which I would have taken care
> to avoid if it really was my code) if cookies are enabled and SID is
> therefore empty?
>
> Sebastian
>
>

It means more code, higher maintenance costs and opens the session to
stealing.

Unlike Micha, I don't always *require* cookies. But if the user decides
to disable cookies, he/she has to suffer the possible consequences.

Now if it is something like a shopping cart, then yes - I require cookies.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

 

Navigation:

[Reply to this message]


Удаленная работа для программистов  •  Как заработать на Google AdSense  •  England, UK  •  статьи на английском  •  PHP MySQL CMS Apache Oscommerce  •  Online Business Knowledge Base  •  DVD MP3 AVI MP4 players codecs conversion help
Home  •  Search  •  Site Map  •  Set as Homepage  •  Add to Favourites

Copyright © 2005-2006 Powered by Custom PHP Programming

Сайт изготовлен в Студии Валентина Петручека
изготовление и поддержка веб-сайтов, разработка программного обеспечения, поисковая оптимизация