Session Theft
| From: | Haseeb Iqbal | Date: | Sat, 29 Mar 2003 04:48:26 +0000 |
| Subject: | Session Theft | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-141451@lists.php.net to get a copy of this message | ||
i just want to figure out a way by which i can stop session theft.i thought
if i can get something from user end that is unique for that user.for e.g.
his/her IP .but it will not work when they are behind firewall.they will be
assigned same IP.is there a way for me to get the IP (e.g.202.202.202.202
thats just an e.g. ) plus computer ip(192.168.0.1 e.g.) i saw once a java
chat server do this.if we can do this then it will help us (SOMEWHAT).
if anyone has better suggestion just let me know
Haseeb