3 ms·
wouldn't a simple IF( $url_id !== $logged_in_id ) die("No access") fix this?
by stef25 15y ago
wouldn't a simple IF( $url_id !== $logged_in_id ) die("No access") fix this?
- slavak 15y agoIf they saved the $logged_in_id in the session then they wouldn't need to pass it as a parameter in the url. No, this probably indicates their entire architecture is ass-backwards.