Re: Pass varible with out URL and SESSION

From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: Pass varible with out URL and SESSION
Date	2012-12-24 22:36 +0100
Message-ID	<ajs078FpcubU1@mid.individual.net> (permalink)
References	(6 earlier) <kb5i3d$ekf$1@news.albasani.net> <TgVBs.744755$9H4.287269@fx17.am4> <1kvm0oh.k2w46f1q492tqN%adrian@poppyrecords.invalid.invalid> <kb9oi7$lsg$1@dont-email.me> <1kvm5y8.1b6i7uyis3la8N%adrian@poppyrecords.invalid.invalid>

Show all headers | View raw

On 24/12/12 16:43, Adrian Tuddenham wrote:
> Scott Johnson <noonehome@chalupasworld.com> wrote:

>> As Jerry mentioned, you still have to use one of the 3 methods.  POST,
>> GET, COOKIE.
>>
>> If you use a frame, invisible or not, once you resend the header to load
>> another page, from the root page or frame (does not matter), you still
>> have to send variables as mentioned above.
>
> Presumably there is nothing to stop you writing the variable to a file
> and then reading it back on the next page?

If you want to store the data, you need to send it to the server with 
help of GET/POST/PUT, Andy was suggesting that he could store values 
without sending the data to the server, this could be done in a way with 
javascript, but the server wouldn't be able to act on the data and you 
need to make it somewhat crafty design which is easily broken by the user.

> The only problem, with a busy website, would be identifying whether the
> same user is requesting that variable as the one who wrote it.

This is why you use sessions, the session cookie can of course be 
hijacked, but it will keep track of who is associated with what data.

> Could
> that be taken care of by storing an array in the file and associating
> each variable with each user's IP number?  As long as the IP number
> didn't change during a session, this would select the wanted variable
> for that user.

You could do that, but you would get issues when you have more than one 
user from the same ip or a user who change ip during the visit at the 
site. I would say the solution is a big step backwards compared to sessions.

-- 

  //Aho

Thread

Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-22 01:18 -0800
  Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 10:24 +0100
    Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-22 11:05 +0100
      Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:37 +0100
        Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:40 +0100
          Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 12:29 +0000
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:21 -0500
              Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:55 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 18:03 -0500
                Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-23 08:56 +0100
                Re: Pass varible with out  URL and SESSION houghi <houghi@houghi.org.invalid> - 2012-12-23 15:25 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 11:21 -0500
                Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:27 -0500
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:45 +0100
  Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 13:15 +0000
    Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-22 05:26 -0800
      Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 14:43 +0000
        Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:23 -0500
          Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 21:55 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:56 +0000
              Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:02 +0100
          Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-23 00:43 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-23 00:09 +0000
              Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-24 09:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 08:30 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 16:40 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 13:56 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 22:26 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:23 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 12:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:41 -0500
                Re: Pass varible with out  URL and SESSION "Peter H. Coffin" <hellsop@ninehells.com> - 2012-12-25 10:14 -0600
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 19:25 +0000
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 01:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 20:36 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 02:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 21:47 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-25 10:03 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 10:31 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 13:10 +0100
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 13:23 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 16:08 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:44 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-27 09:22 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:42 -0500
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 13:41 +0000
                Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-24 06:23 -0800
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 15:43 +0000
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-24 17:07 +0100
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-24 22:36 +0100
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:25 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:25 -0500
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:37 -0500
              Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 13:36 -0500
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 09:32 -0500
      Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 18:09 +0000
        Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 13:45 -0500
  Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 08:25 -0500
  Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-22 17:35 +0100
  Re: Pass varible with out  URL and SESSION email.nandkishore@gmail.com - 2012-12-22 09:51 -0800
  Re: Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-25 07:20 -0800
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 11:40 -0500

csiph-web