Security

[neveriwas]

Using the latest build of PHP4 and Mysql

I am trying to make a members only user authentication system for my website. It will be setup so that it universaly authenticates the user to a memers page and then allows them to subscribe to in-house games sinply by clicking a link to that game without further username password logins until the user closes the browser and comes back another day tot he website.

There are two issue that currently stand out in my mind that I would like some help with.

Firstly, what would be the best way to be able to pass logged in status/auth information from one page to the next so that the user only has to login once per website visit? I would like to use sessions, but without cookies and without passing data in the url, if possible. I also intend to use ADODB as a database and session handler as I learn more about it. It this a good and secure way of doing things?

Second, there was an idea I read prior about declaring all of the script pages in an array and calling them via their ID in the url, What would the syntax of something like that be?

-Jason

[snoopy13]

I can only give you the answer to the question about passing session variables: you could use a form and put the variable in a hidden field. so it wount show in the url and you could still work around cookies.

[neveriwas]

Hmm.. I will try that. It's better than nothing I suppose.