Re: PHP and user login stuff

[Micah Yoder <LYoder@cyberis.net>]

Jason Pincin wrote:

> > Hmmm, on second thought maybe a password in the URL (encrypted or not)
> > isn't necessarily a good idea.
> 
> No.  It's not a good idea.  That stuff can still be snarfed and used,
> encrypted or not.

OTOH, isn't that true with other methods as well?  Isn't SSL the only
way to guarantee it can't be sniffed?

> > 2.  The user enters handle/passwd EVERY time they do something requiring
> > it
> 
> Like that if they choose not to use cookies.  It's not so bad.  Your not
> going to have any one user running around commenting on dozens of
> articles... and you don't need to login to say wether or not an article
> helped you out.  If someone wants to spend an afternoon and make comments
> on 50 articles, I'm sure they would consider a temporary cookie.

> Yeah... to make sure we're on the same page... I was thinking you just
> impliment the method that requires a sign in everytime since it'd be
> easiest... and re-usable once cookies are implimented... cuz we'll still
> need it.

OK, I guess I'll go with that.

> That is unless your further along with another method.  I was just curious
> as to exactly what method you'll be doing first.

No, I haven't started implementing logons yet.