Posted by Robert Jones on 06/21/05 00:25
Oli Filth wrote:
>
> Why do you consider session variables *less* secure than $_GET and
> $_POST strings?
>
>
No idea :) ! Something I read when I was starting out with PHP and web
application development. Doesn't make any sense really does it? So maybe
I should use session variables. My original question still stands, about
how people deal with variables being passed around, some of which should
persist and some of which shouldn't in different contexts.
--
Robert Jones
[Back to original message]
|