Thread: Security issue
View Single Post
  #1 (permalink)  
Old 08-14-2007, 05:18 PM
mcjennis mcjennis is offline
Junior Member
 
Join Date: Aug 2007
Posts: 2
Default Security issue

Hi everybody,
I have a big question for you:
in PHP native in order to check an user authentication we were used to perform an action like this:
if($_SESSION["auth"]) echo "authenticated";
else exit();

but using ZF in order to check the privilege, we have to call Zend_Auth::getInstance()
that creates a session cookie, even if the vistor isn't authenticated, haven't we?
After that we have a cookie for session!

Please let me know if I am right and or show me a workaround.

thank you
cheers Fabrizio
Reply With Quote