Re: [fw-general] Securely exposing session id from Zend_Auth

2007-10-12 Thread Michael B Allen
On 10/12/07, Daniel Rossi <[EMAIL PROTECTED]> wrote: > How is it possible to securely > expose the session id, ie encrypting it and adding as a javascript > variable , so it can be sent along with the request to the src of the > plugin object code. Hi Daniel, The only way to securely communicate

RE: [fw-general] Securely exposing session id from Zend_Auth

2007-10-12 Thread Jared Williams
> -Original Message- > From: Daniel Rossi [mailto:[EMAIL PROTECTED] > Sent: 12 October 2007 12:09 > To: Zend Framework General > Subject: [fw-general] Securely exposing session id from Zend_Auth > > Hi there, tricky question I have a project which is using > Zend_Auth, however when lo

Re: [fw-general] Securely exposing session id from Zend_Auth

2007-10-14 Thread Daniel Rossi
Hi sorry for the late reply, yes I might need to take the Zend_Auth check off here and use that instead, though the page doesnt get loaded each time to get the new key, ie a drop down will just reload the video plugin, i might need to use some ajax there to collect the new token i guess or

Re: [fw-general] Securely exposing session id from Zend_Auth

2007-10-14 Thread Daniel Rossi
The other thing is I could use some encryption package with a salt i guess ? On 13/10/2007, at 10:31 AM, Jared Williams wrote: -Original Message- From: Daniel Rossi [mailto:[EMAIL PROTECTED] Sent: 12 October 2007 12:09 To: Zend Framework General Subject: [fw-general] Securely expos

Re: [fw-general] Securely exposing session id from Zend_Auth

2007-10-15 Thread Daniel Rossi
I cant see any encryption package for Zend though all of the PEAR crypt packages are either mangling the session id or mangling the controller application because its encrypted string after base64 encoding adds forward slashes so breaks the param. On 15/10/2007, at 12:04 PM, Daniel Rossi wr