Another PHP weirdo. Session varibles being passed with cookies turned off????

[cs.punk]

Try this out for yourself with cookies turned off

 

freaky.php

<?php
session_start();


$_SESSION['number'] = 3;
$_SESSION['key'] = time();


$key = "{$_SESSION['key']}";

if ($key == "")
{die("You will never know #1") ;
}
else
{echo "HUH?@!??????????????????????" . $key;
  print_r ($_SESSION);
}
?>

 

... I am trying to make a 'sql querier' file... Protected by a password... I know this is rather pointless but I still feel to continue . And that if cookies is turned off it kinda well not really protects me from a brute force attack... Although whats there to protect?...

[trq]

Your point? You haven't left the same page.

[Mchl]

With cookies turned of sessionid is put into url anyway.