Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #17496

Re: Ecommerce site - how?

From "R.Wieser" <address@not.available>
Newsgroups comp.lang.php
Subject Re: Ecommerce site - how?
Date 2017-06-27 10:48 +0200
Organization Aioe.org NNTP Server
Message-ID <oit644$aj2$1@gioia.aioe.org> (permalink)
References <d2223e3b-f44c-4ef7-b55a-94e012d85a95@googlegroups.com><oiodsn$pud$1@gioia.aioe.org><PcqdnRTWK6vXeM3EnZ2dnUU7-X3NnZ2d@posted.internetamerica><oir89b$187l$1@gioia.aioe.org> <oirani$2jp$1@solani.org><oirgtl$1po2$1@gioia.aioe.org> <erd6dvFhfi0U1@mid.individual.net><oirtfe$h7d$2@gioia.aioe.org> <ois1r3$jv8$1@solani.org>

Show all headers | View raw

Christoph,

> Consider to read up on session.cookie_lifetime
>
(<http://php.net/manual/en/session.configuration.php#ini.session.cookie-life
time>).

I did you one better: I double-checked my knowledge of it by taking a peek
at the RFC for it. :-)

> Consider to take a second stab at it - for your and your readers sake.

Nope.   First off, I have a considerable problem with dealing with "do as I
say, not as I do" people/environments. Secondly, I am definitily not willing
to go on a wild goosehunt to figure out which part could/would be applicable
(to the problem at hand or otherwise) (the CSRF attack mitigation promently
displayed on their front page definitily isn't).  So, either I get a "this
is what I'm talking about" reference, or its a no-go (also, I have no use
for it -- which makes it even less interresting). Sorry.

Regards,
Rudy Wieser


-- Origional message:
Christoph M. Becker <cmbecker69@arcor.de> schreef in berichtnieuws
ois1r3$jv8$1@solani.org...
> On 26.06.2017 at 23:14, R.Wieser wrote:
>
> > Yes, both a cookie and thus the a session ID stored in it can live for
the
> > longest time (depending on the lifetime the website has defined for the
> > cookie-data ofcourse -- which, for a shopping cart of an e-commerce
site,
> > will be rather short), but the PHP session its referring to will be
> > destroyed shortly after you leave the server, making that stored ID
rather
> > worthless.
>
> Consider to read up on session.cookie_lifetime
>
(<http://php.net/manual/en/session.configuration.php#ini.session.cookie-life
time>).
>
> >> If you are interested in learning take a look at OWASP.
> >
> > Nope, not interrested in learning.  No sirree, not at all! /s
> >
> > I just took a quick look at that site (www.owasp.org).   The first thing
I
> > noticed was iframes and JS, both to external sites.   For a fricking
> > *security* minded site.  Don't make me laugh please.  Idiots.
>
> Consider to take a second stab at it - for your and your readers sake.
>
> --
> Christoph M. Becker

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-25 05:42 -0700
  Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-25 15:30 +0200
    Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-25 16:03 +0200
    Re: Ecommerce site - how? gordonb.y152t@burditt.org (Gordon Burditt) - 2017-06-26 05:43 -0500
      Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 17:12 +0200
        Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-26 17:54 +0200
          Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:40 +0200
            Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:42 +0200
              Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 23:14 +0200
                Re: Ecommerce site - how? "Christoph M. Becker" <cmbecker69@arcor.de> - 2017-06-27 00:28 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:48 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:56 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 12:27 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:15 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 22:01 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:07 +0200
                Re: Ecommerce site - how? Gordon Burditt <gordon@hammy.burditt.org> - 2017-06-30 17:08 -0500
        Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 18:29 +0200
          Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 19:17 +0200
            Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 13:34 -0400
              Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 20:11 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-26 21:31 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-26 22:29 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 07:19 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 11:24 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-27 19:43 +0200
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 23:09 +0200
                Re: Ecommerce site - how? "J.O. Aho" <user@example.net> - 2017-06-28 07:12 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 21:10 -0400
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-26 16:32 -0400
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 10:30 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 08:38 -0400
                Re: Ecommerce site - how? "R.Wieser" <address@not.available> - 2017-06-27 17:47 +0200
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 12:16 -0400
                Re: Ecommerce site - how? gordonb.bytf1@burditt.org (Gordon Burditt) - 2017-06-29 18:16 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-29 20:41 -0400
                Re: Ecommerce site - how? gordonb.99a3p@burditt.org (Gordon Burditt) - 2017-06-29 23:39 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 07:28 -0400
                Re: Ecommerce site - how? Stefan+Usenet@Froehlich.Priv.at (Stefan Froehlich) - 2017-06-30 13:48 +0000
                Re: Ecommerce site - how? gordonb.gcghn@burditt.org (Gordon Burditt) - 2017-06-30 16:15 -0500
                Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-30 22:35 -0400
                Re: Ecommerce site - how? Richard Damon <Richard@Damon-Family.org> - 2017-06-29 23:46 -0400
        Re: Ecommerce site - how? gordonb.d2wed@burditt.org (Gordon Burditt) - 2017-06-29 17:32 -0500
  Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-06-27 10:58 -0700
    Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-06-27 15:34 -0400
    Re: Ecommerce site - how? gordonb.4psc7@burditt.org (Gordon Burditt) - 2017-06-30 16:55 -0500
      Re: Ecommerce site - how? bit-naughty@hotmail.com - 2017-07-01 03:03 -0700
        Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:30 -0400
        Re: Ecommerce site - how? Jerry Stuckle <jstucklex@attglobal.net> - 2017-07-01 09:34 -0400

csiph-web