Re: the ?PHPSESSID=spoofme 'bug'
| From: | Giancarlo Pinerolo | Date: | Fri, 07 Jun 2002 08:44:39 +0000 |
| Subject: | Re: the ?PHPSESSID=spoofme 'bug' | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-101099@lists.php.net to get a copy of this message | ||
Giancarlo Pinerolo wrote:
>
> I myself wrote:
> >
> > Can I tell you more than what the subject says?
> > proceeding:
> > Close the browser, clean all your cookies, and open any page with that
> > ?PHPSESSID=spoofme appended.
> > And see what happens.
spoofme is not the exact term.
?PHPSESSID=hijackme should be more appropriate, but I avoided it for
well known 'historical' reasons :-|
G