CyberArmy University | Open Source Institute | CyberArmy Intelligence & Security | CyberArmy Services & Projects

RE: Session dumped through an iframe... need help.


[Replies] [Reply] [View by Thread] [Help]
[Back To Programming]

Posted by Lambda ViceCinC Enstyne On 2008-09-22 03:01:49
In Reply to Session dumped through an iframe... need help. Posted by Guest(Mason) On 2008-09-22 02:55:04

Lambda ViceCinCLambda ViceCinC
Lambda ViceCinC Enstyne


If this script is getting the page with the server-side acting as the client to the webhost on your behalf, is it also sending the cookies containing the session data that is necessary for the webhost to see this as an active session?

Or if it is, is the webhost hashing the IP of the person who logged on into it's DB so the cookie can't be used from another IP without re-logging in?

I looked at your code but it didn't seem to give me a good idea of what was going on, so forgive me if i've missed the mark entirely.

On 2008-09-22 02:55:04, Mason wrote
>I recently wrote a script for my website to test an idea for a whitepaper that I'm writing. The script is as follows:
>
><?php $DEFAULT_FILE = "index.php"; ?>
><?php $url=fopen("url.txt","r"); ?>
><?php $file = fgets($url); ?>
><?php
> if (isset($file)) {
> $file2 = $file;
> echo "<div class=\"source\">\n";
> $content=file_get_contents($file2);
> echo $content;
> echo "</div>\n";
> } else {
> $file = $DEFAULT_FILE;
> }
>?>
>
>
>
>The script is designed to work as a proxy, in conjunction with two other scripts that feed it. My question is, why is it that when a page is loaded using this script that any sessions do not register as being active. I have the website loaded normally with my session set to never expire in one tab of my browser and the same website loaded through this script, but the session does not register as being active.
>
>Should I be using different functions? I've seen source-viewers and other server-side applications access pages originally and have the sessions be active. I need help with this one guys. The whitepaper that I'm working on just won't be as good without a working model for this concept.
>
>Any help would greatly be appreciated. If you don't feel comfortable replying here with additional information, let me know and I'll get my email to you.
>
>Thanks

VCinC. Enstyne - /sered Challenge Coder


Replies:


Guest:
Subject:
Message:
Signature:
Optional Image Link:
http://

CyberArmy::Forum v0.6
Generated In 0.01529 seconds


About Us | Privacy Policy | Mission Statement | Help