Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!storethat.news.telefonica.de!telefonica.de!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "J.O. Aho" Newsgroups: comp.lang.php Subject: Re: Pass varible with out URL and SESSION Date: Mon, 24 Dec 2012 22:36:40 +0100 Lines: 40 Message-ID: References: <44f707c3-aabd-4a5e-a13a-49eba315d20f@googlegroups.com> <1kvm0oh.k2w46f1q492tqN%adrian@poppyrecords.invalid.invalid> <1kvm5y8.1b6i7uyis3la8N%adrian@poppyrecords.invalid.invalid> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: individual.net zLab8IDXS5lWvx0M5f+WQwLPnMOYATjYU1+i/ircY4I6XE0YRNWntC7X8ORCwSFVQ9 Cancel-Lock: sha1:tCOZJFFmnEAiHZSjwLim6VijDYw= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 In-Reply-To: <1kvm5y8.1b6i7uyis3la8N%adrian@poppyrecords.invalid.invalid> Xref: csiph.com comp.lang.php:7916 On 24/12/12 16:43, Adrian Tuddenham wrote: > Scott Johnson wrote: >> As Jerry mentioned, you still have to use one of the 3 methods. POST, >> GET, COOKIE. >> >> If you use a frame, invisible or not, once you resend the header to load >> another page, from the root page or frame (does not matter), you still >> have to send variables as mentioned above. > > Presumably there is nothing to stop you writing the variable to a file > and then reading it back on the next page? If you want to store the data, you need to send it to the server with help of GET/POST/PUT, Andy was suggesting that he could store values without sending the data to the server, this could be done in a way with javascript, but the server wouldn't be able to act on the data and you need to make it somewhat crafty design which is easily broken by the user. > The only problem, with a busy website, would be identifying whether the > same user is requesting that variable as the one who wrote it. This is why you use sessions, the session cookie can of course be hijacked, but it will keep track of who is associated with what data. > Could > that be taken care of by storing an array in the file and associating > each variable with each user's IP number? As long as the IP number > didn't change during a session, this would select the wanted variable > for that user. You could do that, but you would get issues when you have more than one user from the same ip or a user who change ip during the visit at the site. I would say the solution is a big step backwards compared to sessions. -- //Aho