How to secure lavalair ALL versions

[BioBeo]

Hey I am getting this error !!!!!

Warning: strtoupper() expects parameter 1 to be string, array given in \core.php on line 224 ==

if (in_array(strtoupper($char), $badchars))

[CreativityKills]

Means $char is an array bt strtoupper works with strings only.

[BioBeo]

Means $char is an array bt strtoupper works with strings only.

hmmm.........

[Jerson]

Lol $_SESSION is not cookie and it is secured because it doesnt create file like cookie in your computer.

[CreativityKills]

...But it creates a file in the servers HDD which means on shared hosting theres possibility of hijacking, or fixing.

[adex3g]

Yes use $_SESSION to secure ur lava sid

[subzero]

No if you set cookies on server its the best idea to use system cookies

$load_cookie_folder = cookie("tmp/$_COOKIE['sid']");

if you like to hide the cookie and make it 2x harder ( may can lose info on users ) that make _tmp before www or public_html folders then place * folder in there and load

Get users ip and browser

$load_cookie_folder_hidden = cookie("_tmp/$_LOAD['ip']-$_LOAD['browser']/$_REQUEST['cookie']");

Now this will pick up users that used this and paypal has this and ebay

and this will not show in brower cookie list or it can be downloaded.