Re: Pass varible with out URL and SESSION

From	Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups	comp.lang.php
Subject	Re: Pass varible with out URL and SESSION
Date	2012-12-24 20:25 -0500
Organization	A noiseless patient Spider
Message-ID	<kbav9h$ea8$2@dont-email.me> (permalink)
References	(8 earlier) <1kvm0oh.k2w46f1q492tqN%adrian@poppyrecords.invalid.invalid> <kb9oi7$lsg$1@dont-email.me> <1kvm5y8.1b6i7uyis3la8N%adrian@poppyrecords.invalid.invalid> <ajs078FpcubU1@mid.individual.net> <kbao9e$805$2@news.albasani.net>

Show all headers | View raw

On 12/24/2012 6:25 PM, The Natural Philosopher wrote:
> On 24/12/12 21:36, J.O. Aho wrote:
>> On 24/12/12 16:43, Adrian Tuddenham wrote:
>>> Scott Johnson <noonehome@chalupasworld.com> wrote:
>>
>>>> As Jerry mentioned, you still have to use one of the 3 methods.  POST,
>>>> GET, COOKIE.
>>>>
>>>> If you use a frame, invisible or not, once you resend the header to
>>>> load
>>>> another page, from the root page or frame (does not matter), you still
>>>> have to send variables as mentioned above.
>>>
>>> Presumably there is nothing to stop you writing the variable to a file
>>> and then reading it back on the next page?
>>
>> If you want to store the data, you need to send it to the server with
>> help of GET/POST/PUT, Andy was suggesting that he could store values
>> without sending the data to the server, this could be done in a way with
>> javascript, but the server wouldn't be able to act on the data and you
>> need to make it somewhat crafty design which is easily broken by the
>> user.
>>
>>
>>> The only problem, with a busy website, would be identifying whether the
>>> same user is requesting that variable as the one who wrote it.
>>
>> This is why you use sessions, the session cookie can of course be
>> hijacked, but it will keep track of who is associated with what data.
>>
>>
>>> Could
>>> that be taken care of by storing an array in the file and associating
>>> each variable with each user's IP number?  As long as the IP number
>>> didn't change during a session, this would select the wanted variable
>>> for that user.
>>
>> You could do that, but you would get issues when you have more than one
>> user from the same ip or a user who change ip during the visit at the
>> site. I would say the solution is a big step backwards compared to
>> sessions.
>>
> well cookies, anyway. I didn't find sessions gave me anything using was
> cookies didn't.
>
> The POST method is good but wont survive a browser shutdown. Most
> browsers store cookies on the local hard drive.
>
>
>
>

It gives you SECURITY as the data is not sent to the client - only the 
session id is.  But then noobs don't know (or care) about security.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Thread

Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-22 01:18 -0800
  Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 10:24 +0100
    Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-22 11:05 +0100
      Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:37 +0100
        Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:40 +0100
          Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 12:29 +0000
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:21 -0500
              Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:55 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 18:03 -0500
                Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-23 08:56 +0100
                Re: Pass varible with out  URL and SESSION houghi <houghi@houghi.org.invalid> - 2012-12-23 15:25 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 11:21 -0500
                Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:27 -0500
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:45 +0100
  Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 13:15 +0000
    Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-22 05:26 -0800
      Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 14:43 +0000
        Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:23 -0500
          Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 21:55 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:56 +0000
              Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:02 +0100
          Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-23 00:43 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-23 00:09 +0000
              Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-24 09:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 08:30 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 16:40 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 13:56 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 22:26 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:23 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 12:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:41 -0500
                Re: Pass varible with out  URL and SESSION "Peter H. Coffin" <hellsop@ninehells.com> - 2012-12-25 10:14 -0600
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 19:25 +0000
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 01:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 20:36 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 02:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 21:47 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-25 10:03 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 10:31 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 13:10 +0100
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 13:23 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 16:08 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:44 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-27 09:22 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:42 -0500
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 13:41 +0000
                Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-24 06:23 -0800
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 15:43 +0000
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-24 17:07 +0100
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-24 22:36 +0100
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:25 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:25 -0500
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:37 -0500
              Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 13:36 -0500
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 09:32 -0500
      Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 18:09 +0000
        Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 13:45 -0500
  Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 08:25 -0500
  Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-22 17:35 +0100
  Re: Pass varible with out  URL and SESSION email.nandkishore@gmail.com - 2012-12-22 09:51 -0800
  Re: Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-25 07:20 -0800
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 11:40 -0500

csiph-web