RE: [PHP] Security question

From: Date: Wed, 07 Dec 2005 11:52:50 +0000
Subject: RE: [PHP] Security question
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-227035@lists.php.net to get a copy of this message
Hi Andy, On 12/7/05, Andy Pieters <mailings@vlaamse-kern.com> wrote: > Right now when the user is logged in, I put its id in the session. > Then when the user edits his details I put the id in the form and when it > comes back I verify if the id matches the one in the session. Well, is session data saved in a "secure" place on the server side? Read Form Processing and Sessions sections in the PHP Security Guide http://phpsec.org/projects/guide/ Regards, Ahmed

« previous php.general (#227035) next »