Re: Session trubles

From: Date: Wed, 19 Nov 2003 14:10:55 +0000
Subject: Re: Session trubles
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-170281@lists.php.net to get a copy of this message
Thanks that was my problem :-) On Wed, 19 Nov 2003, Marek Kilimajer wrote: > The first parameter is relative to the current time. I would recomend > for security reasons to leave this to the default, 0 - until the browser > is closed. Otherwise this could lead to session hijacking - when the bad > guy uses your site and gets a cookie with long lifetime, he knows that > the cookie with session id will be used for other users using the same > browser. Mit freundlichen Grüssen Markus Graf Hauptstrasse 80 9434 Au 0041 (0)79 / 261 16 37 mgraf@iframe.ch -- Software is like sex, it's better when it's free!

« previous php.general (#170281) next »