How to secure lavalair ALL versions

[subzero]

No if you set cookies on server its the best idea to use system cookies

$load_cookie_folder = cookie("tmp/$_COOKIE['sid']");

if you like to hide the cookie and make it 2x harder ( may can lose info on users ) that make _tmp before www or public_html folders then place * folder in there and load

Get users ip and browser

$load_cookie_folder_hidden = cookie("_tmp/$_LOAD['ip']-$_LOAD['browser']/$_REQUEST['cookie']");

Now this will pick up users that used this and paypal has this and ebay

and this will not show in brower cookie list or it can be downloaded.

[adex3g]

Yes use $_SESSION to secure ur lava sid

[CreativityKills]

...But it creates a file in the servers HDD which means on shared hosting theres possibility of hijacking, or fixing.

[Jerson]

Lol $_SESSION is not cookie and it is secured because it doesnt create file like cookie in your computer.

[BioBeo]

Means $char is an array bt strtoupper works with strings only.

hmmm.........

[CreativityKills]

Means $char is an array bt strtoupper works with strings only.

[BioBeo]

Hey I am getting this error !!!!!

Warning: strtoupper() expects parameter 1 to be string, array given in \core.php on line 224 ==

if (in_array(strtoupper($char), $badchars))

[CreativityKills]

^ actually dat still doesnt make it safe from ALL methods.

[subzero]

i three that.

Users still can grab cookies / session from a user only way to block it if you made a script that needs two cookies and decoded to 651 ways of bass

[CreativityKills]

Second that ^

[metulj]

You better hide the sid to be secured. And rename php file then use mod rewrite. Its more easy than coding like that

hidding session => sid.. doesnt make your site secure at all...

[Jerson]

You better hide the sid to be secured. And rename php file then use mod rewrite. Its more easy than coding like that

[wapmetal]

lol what do you mean by dead?.

[WhyQ]

Is this thread dead?

[wapmetal]

php_flag off for shell script...

not all server works on this lol