View Single Post

  #3 (permalink)  
Old 10-11-2004
R. Rajesh Jeba Anbiah
 
Posts: n/a
Default Re: Securing PHP Code that Creates Images

Chris Hope <blackhole@electrictoolbox.com> wrote in message news:<7o5ad.11801$JQ4.749785@news.xtra.co.nz>...
> Steve wrote:

<snip>
> > when I reference the php code via img src="myimage.php", none of my
> > session variables are available for use in the script.


It shouldn't happen unless your script is buggy.

> Not sure why you would be having problems with the session stuff, and anyway
> it's not a perfect solution because it won't work if they don't have
> cookies enabled.


Not sure, what are you talking about.

<snip>
> The advantage of doing it this way is that people cannot directly access the
> image generation script, and there's no possibilty of hotlinking to the
> image from another site as they'll get a broken image after 2 hours.


Incidentally, hotlinking can be *easily* fixed with session and
output buffering techniques.

--
| Just another PHP saint |
Email: rrjanbiah-at-Y!com
Reply With Quote