Re: Secure way to handle pw on session.

From: Date: Tue, 02 Sep 2008 21:26:12 +0000
Subject: Re: Secure way to handle pw on session.
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-279351@lists.php.net to get a copy of this message
On Tue, 2008-09-02 at 16:22 -0500, Micah Gersten wrote: > If one does not know where the session data is, one cannot inject code > to expose it. PHP knows where the session data is, the very function you gave provides the path to it also. If you've got code injection then you've got someone who can probably read the return value of session_save_path(). Cheers, Rob. -- http://www.interjinn.com Application and Templating Framework for PHP

« previous php.general (#279351) next »