Re: Session Theft
| From: | Jim Lucas | Date: | Fri, 28 Mar 2003 16:08:07 +0000 |
| Subject: | Re: Session Theft | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-141454@lists.php.net to get a copy of this message | ||
check into forcing the use of trans_sid
Jim
----- Original Message -----
From: "Haseeb Iqbal" <webcodder@hotmail.com>
To: "PHP General list" <php-general@lists.php.net>
Sent: Friday, March 28, 2003 8:48 PM
Subject: [PHP] Session Theft
> i just want to figure out a way by which i can stop session theft.i
thought
> if i can get something from user end that is unique for that user.for e.g.
> his/her IP .but it will not work when they are behind firewall.they will
be
> assigned same IP.is there a way for me to get the IP (e.g.202.202.202.202
> thats just an e.g. ) plus computer ip(192.168.0.1 e.g.) i saw once a java
> chat server do this.if we can do this then it will help us (SOMEWHAT).
>
> if anyone has better suggestion just let me know
> Haseeb
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>