RE: [PHP] storing passwords in $_SESSION
| From: | Jay Blanchard | Date: | Mon, 10 Oct 2005 18:36:12 +0000 |
| Subject: | RE: [PHP] storing passwords in $_SESSION | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-223835@lists.php.net to get a copy of this message | ||
[snip]
How secure is it to save a password in $_SESSION.
i.e. $_SESSION['password']
is it safe and is it practical?
[/snip]
I would think it neither safe nor practical. Once a user has logged in
having the password in SESSION would be useless.