Re: close session when browser is closed
| From: | Travis Doherty | Date: | Thu, 22 Mar 2007 00:44:27 +0000 |
| Subject: | Re: close session when browser is closed | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-251061@lists.php.net to get a copy of this message | ||
Alain Roger wrote:
> Hi Brad,
>
> yes this is one possibility, but since i use https, i should not be
> afraid
> by storing data in $_SESSION variables.
Just a note that while SSL may help to protect the session id from being
packet sniffed you should still be concerned about storing sensitive
data in _SESSION. Anyone local to the system can probably read
plaintext session data from the session cache.
HTTPS only protects communications between the client and the server at
best, do be afraid!
Travis Doherty