Re: [nyphp-talk] Open Source CMS for PHP5

2008-08-21 Thread Edward Potter
2+ million users, I'm sure the Mrs. can get it fixed, and embed a C++ mod for you on that one. :-) ed On Thu, Aug 21, 2008 at 9:34 AM, <[EMAIL PROTECTED]> wrote: > i've been playing around with wordpress a bit because the now mrs. needed a > quick website, and this seemed quickest and fastest

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread Kristina Anderson
Thanks everyone for your feedback on this. And I will implement said suggestions, and read up on the session_id(). I'd just like to make everyone aware that this application isn't passing any sensitive data or concerned with credit card processing...it merely needs to put items in the cart an

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread Edward JS Prevost II
Ajai Khattri wrote: > > Sure, but most people reading this are shaking their heads because the PHP > session functions handle sessions IDs for you, no need to generate this > yourself. The session ID should be stored in a cookie and the cookie needs > to be checked for in every page. PHP's ses

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread Ben Sgro
Hello Kristina, David summed this up pretty darn well. I don't see why you are reluctant to use session_id and the other functions. It solves all the problems I can see that you are mentioning. Maybe you could create a test script to play with session_id to get a better feel for how it works,

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread bzcoder
Kristina Anderson wrote: Yes, but if I do $_SESSION['cart_id'], it is effectively the same thing, I'm using this random string as an identifier for the unique cart. This is effectively the same as $_SESSION['session_id'] -- only the name is different. No, it is not effectively the same. Fir

Re: [nyphp-talk] Open Source CMS for PHP5

2008-08-21 Thread y2rob
i've been playing around with wordpress a bit because the now mrs. needed a quick website, and this seemed quickest and fastest solution.  yes, i like it and love the community behind it, but i'm not sure if there is a serious bug within wordpress, but i've notice that some processes get hung

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread Ajai Khattri
On Wed, 20 Aug 2008, Kristina Anderson wrote: > I've got everything going into the database in a table whose structure > is prodID, sessionID fields in each row, so they can add an unlimited > amount of stuff. I just have to guard against that sessionID changing > because it will wipe out thei

Re: [nyphp-talk] preventing randomized session variable from changing when page is refreshed

2008-08-21 Thread Adrian Videnie
Kristina Anderson wrote: $rand=rand(1,9); $session_id=$rand.substr(md5($REMOTE_ADDR), 0, 11+$rand); $session_id.=substr(md5(rand(1,100)), rand(1,32-$rand), 21-$rand); session_id($session_id); session_start(); $_SESSION['sessionid'] = $session_id; OH my God! http://www.php.net/session h