Re: Sequrity without HTTPS?
| From: | Chris Shiflett | Date: | Fri, 19 Nov 2004 02:59:33 +0000 |
| Subject: | Re: Sequrity without HTTPS? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-202477@lists.php.net to get a copy of this message | ||
--- Peter Lauri <peter@lauri.se> wrote:
> Can someone from outside set a $_SESSION variable with some
> "hacker" techniqe?
For all practical purposes, no. Session data is kept on the server and
therefore less exposed and less vulnerable than other data.
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly HTTP Developer's Handbook - Sams
Coming February 2005 http://httphandbook.org/