View Single Post

  #4 (permalink)  
Old 10-11-2004
Chris Hope
 
Posts: n/a
Default Re: Securing PHP Code that Creates Images

R. Rajesh Jeba Anbiah wrote:

> Chris Hope <blackhole@electrictoolbox.com> wrote in message
> news:<7o5ad.11801$JQ4.749785@news.xtra.co.nz>...
>> Steve wrote:

> <snip>
>> > when I reference the php code via img src="myimage.php", none of my
>> > session variables are available for use in the script.

>
> It shouldn't happen unless your script is buggy.
>
>> Not sure why you would be having problems with the session stuff, and
>> anyway it's not a perfect solution because it won't work if they don't
>> have cookies enabled.

>
> Not sure, what are you talking about.
>
> <snip>
>> The advantage of doing it this way is that people cannot directly access
>> the image generation script, and there's no possibilty of hotlinking to
>> the image from another site as they'll get a broken image after 2 hours.

>
> Incidentally, hotlinking can be *easily* fixed with session and
> output buffering techniques.


Except you cannot rely on sessions. If they don't have cookies enabled in
their browser then every request will appear to be from a new session.

--
Chris Hope - The Electric Toolbox - http://www.electrictoolbox.com/
Reply With Quote