Vaag probleem met cookies

if($num=="0"){
    $secu=false;
}elseif($num>1){
    $secu=false;
}elseif($num==1){
    $secu=true;
}

    if($num < 1 || $num > 1)
    $secu=false;
else
    $secu = true;

Jelle Posthuma schreef op 13.10.2008 10:35

... maar het maakt je script wel net iets korter:

    if($num < 1 || $num > 1)
    $secu=false;
else
    $secu = true;

Hi Christiaan,


Am Mittwoch, 28.04.04, um 07:01 Uhr (Europe/Berlin) schrieb Christiaan Knol <email@hidden>:

OK, I am now trying this without cookies after a quick read-up of
session variables. However I still can't seem to get it to work.


Even though you've given up on cookies I'd like to add a few comments on that subject:

1. Most browsers allow the user to configure not to accept cookies. So possibly this is the case on your windows testing machine.

2. I have used cookies with PHP and they worked fine in all browsers including Windows IE 6. (Subject to my remark above.)

3. A browser may refuse to accept a cookie if the domain doesn't match that of the current page URL. Again this depends on the users configuration. So if your cookie is coming from a different server than the rest of the web page that might be the problem.

4. Since cookies are set during the HTTP request you need to make sure that the HTTP headers have not been sent yet when setting the cookie. Either send it before the first byte of the page content or use output buffering to catch the page output and sent the buffer at the end of your script. Use the PHP function headers_sent() in your debug code to verify that they have not been sent just before setting the cookie.

5. After setting the cookie you should get it back from the browser with the NEXT request. So setting a cookie and expecting to see it to be set on the same page immediatly (during "this" script execution) is a wrong assumption. The transaction goes something like this:
Browser: GET some/url -> Server
Server: Set cookie A, send page -> Browser
Browser: GET some/other/url, send along cookie A -> Server
Server: Do something with cookie A, send page -> Browser

6. I use $_COOKIE since the $HTTP_COOKIE_VARS is no longer recommended. See <http://us2.php.net/manual/en/function.setcookie.php> for info. Works fine for me.

7. Cookies can be very useful in conjuction with sessions. Without cookies you need to pass the session id around in the url which looks kind of ugly. With cookies you can transport it invisibly.

8. Cookies are fragile. They are not always available, they can de deleted by the user or they can even be forged, and storage for cookies in the browser may be limited. So think about what you store in a cookie and have a fallback method ready if they fail. Also you might employ some sort of encryption to make forgery harder and you might want to do some additional checks on security sensitive data to avoid someone taking over a session for example. (Note: All this applies to session IDs and other sensitive data in urls as well.)