> SInce register_globals() is ON on my server, I need to be able to > figure out a way to ensure session security.
The single most important thing to do is initialize all your variables. The way to ensure that you have done that is to set the error reporting level to "E_ALL" (which is max). The server will then report it if you use a variable that hasn't yet been assigned a value. Kirk -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php