good/bad idea to use email address in php session variable? [closed]

Posted by Stephan Hovnanian on Pro Webmasters See other posts from Pro Webmasters or by Stephan Hovnanian
Published on 2011-01-13T13:57:13Z Indexed on 2011/01/13 14:59 UTC
Read the original article Hit count: 400

Filed under:

php

|

email

I'm developing some additional functionality for a client's website that uses the email address as a key lookup variable between various databases (email marketing system, internal prospect database, and a third shared DB that helps bridge the gap between the two).

I'm concerned that storing a visitor's email address as a $_SESSION variable could lead to security issues (not so much for our site, but for the visitor).

Anybody have suggestions or experience on whether this is okay to do, or if there's another alternative out there?

© Pro Webmasters or respective owner

Related posts about php

Magento, NGINX, PHP-FPM, APC, MEMCACHED, 16gb Ram CentOS, Spiking PHP-FPM to 100% CPU

as seen on Server Fault - Search for 'Server Fault'
I have been trying to resolve my issue of spiking cpu caused by php-fpm processes. I've reduced the php-fpm config settings to: pm = ondemand pm.max_children = 12 pm.start_servers = 2 pm.min_spare_servers = 2 pm.max_spare_servers = 10 pm.max_requests = 500 php_admin_value[memory_limit] = 128M Problem… >>> More
PHP Pear Installation on CentOS

as seen on Server Fault - Search for 'Server Fault'
[root@ip ~]# yum install php-pear* Reducing CentOS-5 Testing to included packages only Finished Setting up Install Process Package 1:php-pear-1.8.1-2.el5.centos.noarch already installed and latest versio … >>> More
Apache configurations for php "AddType text/html php" or "AddType application/x-httpd-php php .php"

as seen on Server Fault - Search for 'Server Fault'
I am taking over an application server and discover that it contain the following settings: AddType text/html php Although it works, but my understanding is that it should set as following: AddType application/x-httpd-php php .php What are the key differences between the two settings?… >>> More
mod_rewrite settings causes server to throw HTTP 500 errors instead of 404

as seen on Server Fault - Search for 'Server Fault'
Hello. I have a server with VBulletin forum (working under Apache 2.2, CentOS). The default settings for it in .htaccess are as follows: RewriteEngine on RewriteCond %{HTTP_HOST} ^gsmforum\.ru RewriteRule (.*) http://www.gsmforum.ru/$1 [R=301,L] # If you are having problems or are using VirtualDocumentRoot… >>> More
Problems installing Memcache (PECL extension)

as seen on Server Fault - Search for 'Server Fault'
I have installed memcached fine, and now I will need to install PECL extension memcache. Im running RedHat x86_64 es5. The installation gives me this: downloading memcache-2.2.6.tgz ... Starting to download memcache-2.2.6.tgz (35,957 bytes) ..........done: 35,957 bytes 11 source files, building running:… >>> More

Related posts about email

CRM 2011 - Workflows Vs JavaScripts

as seen on Programmers - Search for 'Programmers'
In the Contact entity, I have the following attributes Preferred email - A read only field of type Email Personal email 1 - An email field Personal email 2 - An email field Work email 1 - An email field Work email 2 - An email field School email - An email field Other email - An email field Preferred… >>> More
Sending Email in Android using JavaMail API without using the default android app(Builtin Email app

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi Folks, I am trying to create a mail sending application in android, If I use `Intent emailIntent = new Intent(android.content.Intent.ACTION_SEND`); This will launch the builtin application of android, I'm trying to send the mail on button click directly without using this app, Please any suggestions… >>> More
Processing Email in Outlook

as seen on Daniel Moth - Search for 'Daniel Moth'
A. Why Goal 1 = Help others: Have at most a 24-hour response turnaround to internal (from colleague) emails, typically achieving same day response. Goal 2 = Help projects: Not to implicitly pass/miss an opportunity to have impact on electronic discussions around any project on the radar. Not achieving… >>> More
Processing Email in Outlook

as seen on Daniel Moth - Search for 'Daniel Moth'
A. Why Goal 1 = Help others: Have at most a 24-hour response turnaround to internal (from colleague) emails, typically achieving same day response. Goal 2 = Help projects: Not to implicitly pass/miss an opportunity to have impact on electronic discussions around any project on the radar. Not achieving… >>> More
email is moved to junk-email folder even though sender is listed as safe

as seen on Super User - Search for 'Super User'
Using Outlook-2007 : Added a sender as safe sender, but still the email from that id goes to junk-email folder. Tried resetting all settings and restarted outlook . any ideas ? Thanks! >>> More