Re: storing passwords in $_SESSION
| From: | Philip Hallstrom | Date: | Mon, 10 Oct 2005 18:38:16 +0000 |
| Subject: | Re: storing passwords in $_SESSION | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-223836@lists.php.net to get a copy of this message | ||
How secure is it to save a password in $_SESSION. i.e. $_SESSION['password'] is it safe and is it practical?Probably not. If you're on a shared server, I could write a PHP script to look in /tmp and read the contents of every session file there... -philip