Re: [nyphp-talk] Cookie

2009-03-19 Thread Michele Waldman
I don't use cookies to authenticate. I'm using ht_access mod_auth_digest/msyql. I made like a million posts about this. I just use the cookies to determine if I display a link. If they haven't already authenticated and forge the cookies to display the link, they'll get "access denied". But tha

Re: [nyphp-talk] Cookie

2009-03-19 Thread Paul A Houle
David Mintz wrote: Moreover, are you sure you want to rely on cookies for testing whether a user is authenticated? Uh, don't Google, Facebook, Yahoo, and most of the other top-1000 sites use cookies to tell if users are authenticated? When's the last time you logged onto a public-faci

Re: [nyphp-talk] Cookie

2009-03-19 Thread Michele Waldman
Don't worry, I don't use the cookie for login authentication. My client wanted a link "back to account" on the public pages when the user is logged in. Since $REMOTE_USER wasn't available in the public realm, I was only going to use the cookie for that link. I wound up using a session v

Re: [nyphp-talk] Cookie

2009-03-19 Thread Michele Waldman
Ok. Thanks. I thought if I specified $path = it would resolve. Michele -Original Message- From: talk-boun...@lists.nyphp.org [mailto:talk-boun...@lists.nyphp.org] On Behalf Of Scott Mattocks Sent: Thursday, March 19, 2009 9:18 AM To: NYPHP Talk Subject: Re: [nyphp-talk] Cookie Michele

Re: [nyphp-talk] Cookie

2009-03-19 Thread David Mintz
On Thu, Mar 19, 2009 at 9:18 AM, Scott Mattocks wrote: > Michele Waldman wrote: > >> I was defined in the subdirectory, but not the root directory. >> >> So, I don't think it was an expiration problem. >> > > It isn't that the cookie is expired already. It is that you are setting the > path as th

[nyphp-talk] look for CTO / Sr PHP Developer

2009-03-19 Thread chad qian
Hi, Please feel free to contact my friend directly if you have interest. Thanks! chad Hands on CTO / Sr PHP Developer for Award Winning Real Estate Platform CEO of a small, established real estate services company seeks high stamina PHP guru who wants to take ownership of th

Re: [nyphp-talk] Cookie

2009-03-19 Thread Scott Mattocks
Michele Waldman wrote: I was defined in the subdirectory, but not the root directory. So, I don't think it was an expiration problem. It isn't that the cookie is expired already. It is that you are setting the path as the expiration. You can't just leave it out and hope that the function fig

Re: [nyphp-talk] Cookie

2009-03-19 Thread Michele Waldman
I was defined in the subdirectory, but not the root directory. So, I don't think it was an expiration problem. Michele -Original Message- From: talk-boun...@lists.nyphp.org [mailto:talk-boun...@lists.nyphp.org] On Behalf Of Scott Mattocks Sent: Thursday, March 19, 2009 9:06 AM To: NYPHP T

Re: [nyphp-talk] Cookie

2009-03-19 Thread Scott Mattocks
Michele Waldman wrote: From http://domain/accout/login.php, if did setcookie('logged_in", "1", $path="/");, like the documentation said too. Does anyone know what I'm doing wrong here? You mean other than relying on that cookie to tell you if the user is logged in? Yeah, you are missing the

[nyphp-talk] Cookie

2009-03-19 Thread Michele Waldman
I tried to set cookie from a subdirectory for the whole domain, but it didn't work. >From http://domain/accout/login.php, if did setcookie('logged_in", "1", $path="/");, like the documentation said too. But it still set it for the entire domain. I also tried: setcookie('logged_in", "1", $p