Session Questions

[fretburner]

@mikey_w

As far as security, I guess I don’t want hackers trying code=404, 405, 406…

And what’s the worst that could happen, they display an error message that doesn’t apply to them?

[oddz]

As someone outside looking in it sounds to me like you’re investing WAY to much time for a tiny segment of users of which is even smaller considering the amount of traffic.

[mikey_w]

@oddz

As someone outside looking in it sounds to me like you’re investing WAY to much time for a tiny segment of users of which is even smaller considering the amount of traffic.

So based on the description of my website design, you would leave it as-is?

[oddz]

yes

However, could you just ditch the flash message system altogether. There really isn’t any reason to be using the session to store error messages. It certainly isn’t required by any means.

[mikey_w]

@oddz

yes

However, could you just ditch the flash message system altogether. There really isn’t any reason to be using the session to store error messages. It certainly isn’t required by any means.

Could you explain what you mean?

What is a “flash message system”? (I assume you don’t mean Adobe Flash!)

[felgall]

@mikey_w

What is a “flash message system”?

If you don’t know anything about your current flash message system that you invented then how do you expect anyone else to know?

[s_molinari]

Two of the most popular PHP frameworks use the same or similar method for flash (quick and session persistent) messages, like error messages. So, I’d say that is an indication you are safe and smart to do it too.

http://symfony.com/doc/current/components/http_foundation/sessions.html#flash-messages

Laravel - The PHP Framework For Web Artisans

Scott