Re: Effects of changing sessid information within URL
| From: | CPT John W. Holmes | Date: | Wed, 16 Apr 2003 15:07:12 +0000 |
| Subject: | Re: Effects of changing sessid information within URL | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-144124@lists.php.net to get a copy of this message | ||
> What problems (if any) would I run into if I decide to consistently
compare
> the session id within the URL to the orginal one to rule out the
possibility
> of someone creating a new session id for themselves. If the result of
the
> comparison is not the same...I'd toss them an error message and force them
> to log back in.
It's kind of a waste of time. The user can change the ID in the URL or in
the cookie, it doesn't matter.
---John Holmes...