Re: Re: the ?PHPSESSID=spoofme 'bug'
| From: | Josep R. Raurell | Date: | Fri, 07 Jun 2002 09:58:02 +0000 |
| Subject: | Re: Re: the ?PHPSESSID=spoofme 'bug' | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-101103@lists.php.net to get a copy of this message | ||
If you destroy the session (for exaple with a logoff button) this dosen work.
Josep R. Raurell
Giancarlo Pinerolo wrote:
Giancarlo Pinerolo wrote:I myself wrote:spoofme is not the exact term. ?PHPSESSID=hijackme should be more appropriate, but I avoided it for well known 'historical' reasons :-| GCan I tell you more than what the subject says? proceeding: Close the browser, clean all your cookies, and open any page with that ?PHPSESSID=spoofme appended. And see what happens.