Re: Some Advice
| From: | php at nobswolf dot info | Date: | Tue, 25 Jun 2013 12:32:24 +0000 |
| Subject: | Re: Some Advice | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-321486@lists.php.net to get a copy of this message | ||
You should at least check the IP of the client additionally to have some prove
it is the same client you gave the session-ID.
And it is better to put the session-ID in a POST-field than in GET. So it
es very unlikely someone passes a session ID around accidently.