Dear,
Here I m going to post my idea to make information of restricted area more secure. I don't know whether developers have already done this or not. still I want to discuss my idea.


See, one can easily access the data of a session of PHP using the Session ID. So, by the following idea I think no one will be to do such act.

Every time a browser starts, it can generate a random number and it will be offcourse unique in the world. This number will not identical in anyway to any other number. When we register session we can the Unique ID to make our script more secure. and no other person from any other computer will be able to access to the registered session if we develop our script using this ID

Do you understand what I want to say?

Please discuss regarding this matter.


Best Regard:
Md. Zakir Hossain (Raju)
www.rubd.net
www.xenex.rubd.net
www.forum.rubd.net

__________________
Best Regard:
Md. Zakir Hossain (Raju)

www.rajuru.xenexbd.com - my blog with PHP scripts, PHP Book Review and many more

no.
first how can other Web sites access some site's session variables?

If I understand the question correctly, What you suggest has already been done (sort of). Intel serialized their CPU's to do exactly what you suggest, but too many people were afraid of it's use citing concerns of "Big Brother" watching us.



Paul Gardner
------------------
PHP-LIVE help
Via Web @ http://www.mnetweb.co.uk/irc
Via IRC Client pgardner.net:6667
room #PHP

yes, other site can use session id

please read
Sessions and security
in
http://hk.php.net/manual/en/ref.session.php

Best Regard:
Md. Zakir Hossain (Raju)
www.rubd.net
www.xenex.rubd.net
www.forum.rubd.net