[PHP-users 32594] Re: セッションで制限しているページが見えてしまう

Takashi Nakao kalze @ fakelife.info
2007年 9月 5日 (水) 10:31:54 JST


$B$I$&$b=i$a$^$7$F!#(B
$B$A$g$C$H$*$?$:$M$7$?$$$N$G$9$,!#(B


> $B$3$N;~!"%"%I%l%9%P!<$KD>@\(BB.php$B$N(BURL$B$rF~NO$7$F$b%(%i!<MQ(Bhtml$B$rI=<($7$^$9$,!"(B
> $B0J2<$N<j=g$@$HDL>o=hM}$r<B9T$7$F$7$^$$$^$9!#(B
> $B!!-!(BA.php$B$rI=<((B
> $B!!-"(BA.php$B$N%=!<%9$r%m!<%+%k%U%)%k%@$X$=$N$^$^%3%T!<!J(Bxxxx.html$B!K(B
> $B!!-#(Bxxxx.html$BFb$N(Blocation.href$B$K(BA.php$B$N(BURL$B$r(BB.php$B$KCV49$($?$b$N$K>e=q$-(B
> $B!!-$(BA.php$B$OI=<($7$?$^$^$G!"(Bxxxx.html$B$r3+$-%j%s%/$r%/%j%C%/$9$k$H(BB.php$B$NDL>o=hM}$,<B9T$5$l$F$7$^$$$^$9!#(B
> 
> B.php$BB&$GCM$N%A%'%C%/$O9T$C$F$$$k$N$G$9$,!"$3$N$h$&$J;v$,$G$-$k$3$H;vBV$KLdBj$OL5$$$N$G$7$g$&$+!)(B
> $BLdBj$,$"$k$H$9$l$PBP=hK!$r65$($FD:$1$J$$$G$7$g$&$+!#(B
> $B$h$m$7$/$*4j$$$7$^$9!#(B

(1)$B$G%;%C%7%g%s3+;O$7$F(B$_SESSION['abc'] = 1;$B$7$F$^$9$h$M!#(B
$B$3$N$"$H(B(2)$B!A(B(4)$B$N4V!"(B(1)$B$N%;%C%7%g%s$O=*N;$7$F$"$k$s$G$7$g$&$+!)(B

$B=q$+$l$F$$$kFbMF$+$i$@$1$@$H!"(B(2)$B!A(B(3)$B$OFC$K4X78$J$$$h$&$K$_$($k$s$G$9$,!#(B
$BC1$K(B(1)$B$G%;%C%7%g%s3+;O$7$F!"(BA.php$B3+$$$?>Z$G$"$k(B$_SESSION['abc'] = 1;$B$,(B
$B%;%C%H$7$F$"$j!"(B(4)$B$G$O(B(1)$B$N%;%C%7%g%s$,M-8z$G(BB.php$B3+$$$?$H$-$K(B$_SESSION['abc'] = 1;
$B$@$+$iDL>o=hM}$,<B9T$5$l$F$$$k$HFI$a$F$7$^$$$^$9$,!#(B

$B8e(B(3)$B$,$h$/J,$+$j$^$;$s!#(B
> (A.php)
> $B!!#1!%%;%C%7%g%sJQ?t(Babc$B!!(B$_SESSION['abc'] = 1;
> $B!!#2!%(B<A>$B%?%0$N(Blocation.href$B$K$F(BB.php$B$r<B9T$7$^$9!#(B
$B$H$$$&$3$H$O!"85!9(BA.php$B3+$$$F3+$$$?%Z!<%8$r%m!<%+%k$K(Bhtml$B$GJ]B8$7$?$i!"(B
<A>$B%?%0$N(Blocation.href$B$K$O(BB.php$B$N(BURL$B$,5-:\$5$l$F$$$k$N$G$O!)(B
$B$J$<(B(3)$B$G(BA.php$B$N(BURL$B$,5-:\$5$l$F$$$k$3$H$K$J$C$F$$$k$N$G$7$g$&$+!)(B


$B$b$7$+$7$?$i!"(BPHP$B>\$7$$$R$H$K$OJ,$+$k$b$N$J$N$+$b$7$l$J$$$N$G$9$,!"(B
$B$A$g$C$H<+J,$K$OJ,$+$j$+$M$?$N$G!"@bL@$$$?$@$1$k$H$&$l$7$$$G$9!#(B







PHP-users メーリングリストの案内