Re: Re: Security, Late Nights and Overall Paranoia
| From: | Chris Shiflett | Date: | Sun, 10 Jul 2005 01:37:17 +0000 |
| Subject: | Re: Re: Security, Late Nights and Overall Paranoia | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-218394@lists.php.net to get a copy of this message | ||
Ezra Nugroho wrote:
Here is one security measure that you HAVE to do if you allow people to submit contents to your site. 1. track client's IP. 2. Associate sensitive cookies with the IP, if they don't match, ignore it or invalidate the cookie.If by "HAVE to" you mean "MUST NEVER," then I agree. :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/