Re^2: how do I force a specific session, not my own, to end?

[ted.byers]

Thanks. That put me on track to find the solution.

What you didn't show was how to pass $bad_user_id to function purge. Here is my solution:

sub purge_bad_user {
  my $bad_user = shift;
  $bad_user = -10 unless defined $bad_user;
  CGI::Session->find( sub { purge(@_,$bad_user) } );
}

sub purge {
  my ($session,$bad_user_id) = @_;
  next if $session->is_empty;    # <-- already expired?!
  if ( ($session->param('user_id') == $bad_user_id) ) {
    $session->delete();
    $session->flush();
  }
  my $db = 'test';
  my $hostname = 'localhost';
  my $user = 'rejbyers';
  my $dbpwd = 'Didr39Qcab';
  my $dbh = DBI->connect_cached("DBI:mysql:database=$db;host=$hostname
+",$user,$dbpwd,{RaiseError => 1})
    or die "Failed to connect to the DB.\n";
  use Math::Random::MT::Auto::Range;
  my %prng_options;
  $prng_options{'LOW'} =  1000000000;
  $prng_options{'HIGH'} = 9999999999;
  $prng_options{'TYPE'} = 'INTEGER';
  my $prng = Math::Random::MT::Auto::Range->new(%prng_options);
  my $p = $prng->rrand();
  my $sql = "UPDATE users SET password = '$p' WHERE idusers = $bad_use
+r_id";
  $dbh->do($sql);
  $dbh->disconnect;
}

Please let me know if I missed something in this. I am still working on testing it.

Thanks

ted

[Anonymous Monk]

Please let me know if I missed something in this. I am still working on testing it.

bobby-tables.com: A guide to preventing SQL injection in Perl