[PHP-DB] $_SESSION issues - possible security hole?

2008-08-10 Thread Darron Butler
I have built an application where users have to log in (the user data is stored in MySQL). I have 3 levels of rights for users; 1-"normal" rights, 2-"admin" rights, and 3-"super" user rights. When a user logs in, I set the $_SESSION['rights'] variable accordingly so I can reference it thru out the

Re: [PHP-DB] $_SESSION issues - possible security hole?

2008-08-10 Thread Darron Butler
Thanks for your thoughts. To answer your first question, I'm using extract() because this is a page where admins and super users can edit the permissions of others for the site. Therefore, I have to query the database to create a listing of all users, and then have the admin/super user select one t

Re: [PHP-DB] $_SESSION issues - possible security hole?

2008-08-10 Thread Darron Butler
gt; > - > > > Thank you, > Micah Gersten > onShore Networks > Internal Developer > http://www.onshore.com > > > > Darron Butler wrote: > > Thanks for your thoughts. To answer your first question, I'm using > extract() > > because t