Re: Securing PHP Code that Creates Images
Chris Hope <blackhole@electrictoolbox.com> wrote in message news:<7o5ad.11801$JQ4.749785@news.xtra.co.nz>...
> Steve wrote:
<snip>
> > when I reference the php code via img src="myimage.php", none of my
> > session variables are available for use in the script.
It shouldn't happen unless your script is buggy.
> Not sure why you would be having problems with the session stuff, and anyway
> it's not a perfect solution because it won't work if they don't have
> cookies enabled.
Not sure, what are you talking about.
<snip>
> The advantage of doing it this way is that people cannot directly access the
> image generation script, and there's no possibilty of hotlinking to the
> image from another site as they'll get a broken image after 2 hours.
Incidentally, hotlinking can be *easily* fixed with session and
output buffering techniques.
--
| Just another PHP saint |
Email: rrjanbiah-at-Y!com
|