06-19-2008, 11:31 PM
|
#6 (permalink)
|
|
The Addict
Join Date: Sep 2007
Location: Denmark
Posts: 240
Thanks: 5
|
Quote:
Originally Posted by EyeDentify
Well the info in the Cookie could be changed giving other users access to pictures they shouldent. So i would go about to use user ID:s and SESSION variables to get them. in other words, save the USER id into a SESSION at login and then use it when displaying the users pictures.
|
Normally info in session data or even cookie data (session data can be cookie data if not using the transid option in session) include a login hash of some sort which is used to identify a login, and the login check would check if the id in the session or cookie variable matches the one with the login hash and if it fails it would halt script execution.
Or atleast thats what real time application does =)
__________________
|
|
|