Posted by Onideus Mad Hatter on 07/02/05 00:37

On Fri, 01 Jul 2005 22:17:13 +0100, Mimic <dev@null.net> wrote:

>Onideus Mad Hatter wrote:
>
>> YOU CAN'T. Coincidentally, a couple people...not in alt.html nor in
>> alt.php have actually suggested alternate methods, like using GET
>> variables rather than cookies...which is peachy, I could do it that,
>> I'll probably try it at least, see if it's any faster. Someone
>
>Never mind GET variables, that was just a fleeting idea... oh no, Ive
>come up with something far better :D You want no cookies, I have none,
>you wanted to mask your variables... oh Ive certainly done that ;D
>
>Still 1 bug I need to fix and I want to bum some lines out the code. But
>soon, you may see my masterpiece :D

I look forward to it, hell I look forward to anything that can
outmatch my designs, the last thing I'd ever want to actually think is
that I had reached an all ending level of absolute perfection. When I
said it's the "perfect liquid website"...I only meant currently.
There are ALWAYS better ways there are ALWAYS new plateaus to reach
there are ALWAYS new goals...that's what makes all this stuff so much
fun...

Of course people like that Richard guy...they don't get that, all they
do is bitch, talk shit, run at the fuckin mouth and produce NOTHING.
And really, there are only two types of people in these froups...those
who produce...and those who don't do fuck all but talk.

>> mentioned security concerns using my current methodology but they
>> never elaborated and the only thing I could think of is if you like
>> spoofed a cookie at the PHP script

>Sorry I should have included a link:
>http://uk.php.net/manual/en/security.globals.php
>Just something to be weary of :)

Ahhh yes, I remember reading that back when I was working on the NP
Index site. I also remembered this part:

"This page will explain how one can write insecure code with this
directive but keep in mind that the directive itself isn't insecure
but rather it's the misuse of it."

Like I said, I'm not misusing it, spoofing a cookie on the site isn't
going to do anything but not generate an image, no security risk.

--

Onideus Mad Hatter
mhm ¹ x ¹
http://www.backwater-productions.net

[Back to original message]