
September 6th, 2003, 11:41 AM
|
|
Average Intelligence
|
|
Join Date: Apr 2003
Location: Ohio/Chicago
Posts: 678
Time spent in forums: 10 m 22 sec
Reputation Power: 6
|
|
|
is this your computer? Can't you just use the server logs which will be much more accurate and also help debug problems/hack attempts.
step 2 is i can't understand your logic? I'm not criticizing i just want to make sure you know what you're doing, maybe you have a good reason for this but querystring is quite possibly to most unsecure method of checkin for entrance. If i go to your site and don't have mode="login" then you can't redirect me and i'm into your site....sup wit dat? You'll need to force it on everypage and if they're not loged in, then redirect them to a page to sign up rather then redirect them if they are indeed logged in, i recommend creating a session if they are loged in, and check that on everypage. As for the members/search.asp redirect, are you checking for validitiy on that page as well? Cause i could easily just go there if i'm not logged in too. In anycase you'd need to redirect me anyway if i'm logged in so that's double checking for no reason.
So what's with the text file? I don't see what you need/know what your problem is.
***EDIT*** damnit... collision again with nopoints.
Last edited by unatratnag : September 6th, 2003 at 11:48 AM.
|