Replies

• SomethingSeven Posts: 2Questions: 0Answers: 0

  December 2012

  I got it working with PHP session variables.. but if this is bad practice, somebody shout out!
  
  In my php file that houses the DataTable:
  [code]
  session_start(); // must be called before data is sent
  $_SESSION['user_name'] = $current_user->user_login;
  [/code]
  
  And in my sAjaxSource php file:
  [code]
  
  session_start(); // must be called before data is sent
  $_SESSION['user_name'] = $current_user->user_login;
  [/code]
• allan Posts: 63,106Questions: 1Answers: 10,394 Site admin

  December 2012

  That'd say you are much safer that way than passing it in as part of the Ajax request. Still open to session hijacking, but that's way outside the scope of this forum :-). A google search for PHP session hijacking might prove useful to help harden your script as much as possible.
  
  Allan