Re: password protection - does this work?

From: Michael Fesser (netizen_at_gmx.net)
Date: 02/22/05 

Date: Tue, 22 Feb 2005 02:31:23 +0100

 .oO(juglesh)

>well, yeah, I know all about that (and I am using obviously post in my
>password form), what I'm saying is it works without $_POST['password']. the
>script above is exactly what I'm using, from the top. yeah, I just tested
>it, if I put "?password=secretword" in the address bar, I am 'logged in'.
>So, I'm wondering if there's some special circumstances where you need to
>use $_POST[] and $_GET[] to get those values. Maybe older versions of php?

Not older, but newer versions, where register_globals is disabled by
default. Using $_POST, $_GET etc. is the correct and recommended way.

Micha