Page 1 of 1

session id

Posted: Thu May 22, 2008 7:59 am
by anox
hi,i have a problem.
i have 2 hosts:
(myown host)host B --> page a.php
(other host)host A --> page b.php.
i want session id page on host A.
but i just access host B.
i used this on a.php page on host A:
<iframe
sRc ="http://www.hostB.com"
width="100%">
</iframe>
it shows myown b.php page included a.php ,on host A.
i want get session id of a.page on host A.
i want code like session_id("www.hostB.com/b.php");
how can i get session ID of another website?
:banghead: :drunk: 8O

Re: session id

Posted: Thu May 22, 2008 8:28 am
by Maugrim_The_Reaper
I suggest dropping that idea completely, and coming up with another solution. Exposing a session id to anyone other than the user via a simple request as you seem to want is a pretty serious security risk. Look up google for session hijacking.

Re: session id

Posted: Thu May 22, 2008 11:54 am
by anox
Maugrim_The_Reaper wrote:I suggest dropping that idea completely, and coming up with another solution. Exposing a session id to anyone other than the user via a simple request as you seem to want is a pretty serious security risk. Look up google for session hijacking.
hi,i have a problem.
i have 2 hosts:
(myown host)host B --> page a.php
(other host)host A --> page b.php.
i want session id page on host A.
but i just access host B.
i used this on a.php page on host A:
< ifr ame
sRc ="htt p://www.hostB.com"
width="100%">
< /iframe>
it shows myown b.php page included a.php ,on host A.
i want get session id of a.page on host A.
i want code like session_id("www.hostB.com/b.php");
how can i get session ID of another website?
here is more explain:

Image

i just wanna know that how can i get session id in OTHERS website,not mine .
i want just with this steps get session id of a website:
step 1 : include my page in other web page (that i need session id of this)
step 2 : using a function or something in my page like session_id("www.other

web page.com"); to find session id of other web page.
i want a function using in my page to find session id of other web page.
with just including my page in other web can we get session ID of other web?

regards
--
an0x
anoxibility@yahoo.com