[thelist] in-principle, PHP/mySQL shopping basket question

Julian Voelcker asp at tvw.net
Wed Jul 23 19:30:42 CDT 2003


On 23 Jul 2003 17:54:53 -0600, Aredridel wrote:
> You can use session variables with SID passing in the URL.

OH, just like ASP.Net another popular language!

OK, jokes aside, there are ways around it, but personally I prefer 
trying to encourage users to use a cookie do to the 'messy' urls and 
also the possibility that a user can copy and paste the URL to someone 
else who would then pick up their session, which is a bit of a security 
problem.

Cheers,

Julian Voelcker
Cirencester, United Kingdom




More information about the thelist mailing list