Re: Session trubles
| From: | mgraf | Date: | Wed, 19 Nov 2003 14:10:55 +0000 |
| Subject: | Re: Session trubles | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-170281@lists.php.net to get a copy of this message | ||
Thanks that was my problem :-)
On Wed, 19 Nov 2003, Marek Kilimajer wrote:
> The first parameter is relative to the current time. I would recomend
> for security reasons to leave this to the default, 0 - until the browser
> is closed. Otherwise this could lead to session hijacking - when the bad
> guy uses your site and gets a cookie with long lifetime, he knows that
> the cookie with session id will be used for other users using the same
> browser.
Mit freundlichen Grüssen
Markus Graf
Hauptstrasse 80
9434 Au
0041 (0)79 / 261 16 37
mgraf@iframe.ch
--
Software is like sex, it's better when it's free!