Re: [PHP-DB] session management

2010-04-23 Thread Jason Gerfen
Here I have a blog I setup but have not finished regarding web application authentication which includes source code and classes you can utilize. Unfortunately I have not been able to finish writing the article due to three jobs and school work. I can however assist you in getting it up and r

Re: [PHP-DB] session management

2010-04-23 Thread Richard Quadling
On 22 April 2010 18:56, Vinay Kannan wrote: > Hey Guys, > > I need some help on an effficient session management, right now what I do is > check if the user has loggedin using his username, and create a > SESSION['logged']=1, setting a login flag actually, I am not sure if this is > the best way ?

Re: [PHP-DB] session management

2010-04-22 Thread Jason Gerfen
If you are worried about speed in regards to the server accessing session information then you will want to utilize the mcache service daemon as well as the php mcache libraries in your code. Session hijacking attacks on web applications involve utilizing known attack vectors such as the stati

Re: [PHP-DB] session management

2010-04-22 Thread Vinay Kannan
Hi Jason, Yes this is going to be a public facing application with 3 level heirarchy, and maybe around 100 tiny companies(3-4 employees) using it. App is going to be on a Hosted Server. DB session mgmt would be a bit slower, is it? I have thought about cross site forgery and session hijacking, b

Re: [PHP-DB] session management

2010-04-22 Thread Jason Gerfen
How secure would you want it? Is this is a public facing web application? Are you in a shared hosting environment vs. a dedicated hosting environment? Do you require alternative session management such as database or mcache vs. flat file session support? Have you thought about cross site requ

[PHP-DB] session management

2010-04-22 Thread Vinay Kannan
Hey Guys, I need some help on an effficient session management, right now what I do is check if the user has loggedin using his username, and create a SESSION['logged']=1, setting a login flag actually, I am not sure if this is the best way ? What do you guys use for sessions, and which is the be

Re: [PHP-DB] Session management

2002-02-07 Thread Peter J. Schoenster
On 7 Feb 2002, at 18:36, Danny Kelly wrote: > Hello, > I am trying to set up a session management system for my site. Check > out my site (under development) > http://www.planttel.com/newsite2/home.php I have a user auth system > installed already. What I want is when a customer clicks on log in

[PHP-DB] Session management

2002-02-07 Thread Danny Kelly
Hello, I am trying to set up a session management system for my site. Check out my site (under development) http://www.planttel.com/newsite2/home.php I have a user auth system installed already. What I want is when a customer clicks on log in that it will prompt them for a user name and password (