Re: Session Authentication
| From: | Tijnema ! | Date: | Mon, 09 Apr 2007 16:19:57 +0000 |
| Subject: | Re: Session Authentication | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-252342@lists.php.net to get a copy of this message | ||
On 4/9/07, Stut <stuttle@gmail.com> wrote:
Peter Lauri wrote:Encrypted stuff maybe? Faking cookies can be done without any tools, but were talking about editing here... Tijnema[Peter Lauri - DWS Asia] Having these tools is probably not illegal. But using them illegally is illegal :) Could you send me some more info "off-list" about this. Knowing how to use these tools will probably help me making my sites more secure, am I not right? :) Cookies are HTTP headers, nothing more, nothing less. The minimum "tool" you need is telnet. If you're writing web applications and don't know that, please take the time to read the HTTP spec, and then the cookie spec. Google for them. -StutCookies are old, so in the time they were introduced, today it is possible to create and modify cookies with some good tools. These tools are illegal, but every cracker is 99% illegal right? But that means i can't give you these tools to proof it, but it is possible. Tijnema