Is the user able to change the value of session variables?
ie:
if(!session_is_registered($SESSION){ session_register("SESSION"); $SESSION['access_level'] = 1; } echo $SESSION['access_level'];
user inputs: http://www.foo.com/?SESSION[access_level]=2
Will that output 1 or 2?
JMJ
You could just put that into a PHP and try it out ya know 😃
You have a syntax error btw on that if statement (missing an end parens).
And to answer your question without you actually trying it out for yourself... "1".
Hehe true - except I'd have to go to the trouble of installing php or finding a webhost (looking for #4 as 1-3 completely sucked/screwed us over 🙂
And I ALWAYS miss that last ) on if statements lol!!!
Thanks for the reply 🙂