Re: Secure way to handle pw on session.
| From: | Micah Gersten | Date: | Tue, 02 Sep 2008 21:22:32 +0000 |
| Subject: | Re: Secure way to handle pw on session. | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-279350@lists.php.net to get a copy of this message | ||
If one does not know where the session data is, one cannot inject code
to expose it.
Thank you,
Micah Gersten
onShore Networks
Internal Developer
http://www.onshore.com
Robert Cummings wrote:
> On Tue, 2008-09-02 at 14:45 -0500, Micah Gersten wrote:
>
>> Take a look at this:
>> http://us2.php.net/manual/en/function.session-save-path.php
>>
>
> This won't help since the OP mentioned he was worried about code
> injection exposing the contents of $_SESSION.
>
> Cheers,
> Rob.
>