Re: Re: Security Issues - Where to look?

From: Date: Thu, 10 Nov 2005 21:29:54 +0000
Subject: Re: Re: Security Issues - Where to look?
References: 1 2 3 4 5 6  Groups: php.general 
Request: Send a blank email to php-general+get-225573@lists.php.net to get a copy of this message
GamblerZG wrote:
This comes at a price of a small inconvinience for dial-up users (since they would need to login on each reconnect), but I think such price it reasonable.
Ok, scrap this statement. I did not know about AOL thing. But this one still stands:
IMO, the best way is to re-generate SIDs on each request, but such method will decrease perfomance of a script.


« previous php.general (#225573) next »