PHPSESSID Handling...
| From: | Dan Joseph | Date: | Tue, 01 Apr 2003 17:45:38 +0000 |
| Subject: | PHPSESSID Handling... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-141852@lists.php.net to get a copy of this message | ||
Hi Everyone,
I'm working on securing my application, and am running into a slight issue
that I cannot seem to find a fix for. If the attacker changes his PHPSESSID
cookie to contain illegal characters, it causes an error on the screen upon
session_start().
How can I check to see if this is a valid number, and if it is not, exit the
application?
-Dan Joseph