I plan to setup PHP Runner to organize all user dependent data and give access to an external application written in PHP. At this time the application reads the setup data out of a configuration file that is prepared manually.
It should work as follows:
After the user has identified, an individual set of data is read from database and stored in session variables. PHP Runner redirects to the application. The application tests if a session exists and the required session variables are available.
Is this a valid procedure? Anything else to do to have a robust and secure setup?
I would be grateful for some hints.