Security Issue?!
| From: | Fredrik Arild Takle | Date: | Wed, 13 Feb 2002 19:25:14 +0000 |
| Subject: | Security Issue?! | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-84630@lists.php.net to get a copy of this message | ||
Hi,
I found a weekness in one of my local dev projects today.
php.ini is set ut with cookies off in session handling.
I asked another user to send me his url when logged in,
I copied and pasted it and then I was logged in as him.
What should I do? Turn cookies on? Or write ip to mysql? or...?
Best Regards
Fredrik