There must be something seriously wrong with a.org

[motorollin]

Hmmmm, sounds like your sessions got mixed up or something. Scary!  :nervous:

--
moto

[motorollin]

Wouldn't increasing the length of the session ID decrease the likelihood of a "collision"? Personally I use a 128 character key as the session ID when I'm writing a web app.

--
moto

[motorollin]

Actually I don't know how to do sessions properly in PHP  :oops: I normally generate 128 numbers at random, check whether that combination of numbers currently exists in the users table, and if it doesn't it gets stored in the user's row in the users table. The session ID gets passed from page to page in the URL and is retrieved with $_GET[session]. The first thing any page does is connects to the database and attempts to match the session ID with a user.

I know this isn't particularly secure. When I develop something that requires a higher level of security I'll learn how to do it properly :-)

--
moto

[motorollin]

Wait and see what improvements IBrowse brings. It may be that an improved forum engine will work ok on 2.4 so an upgrade will be possible.

--
moto