Re: Security hole using cookies for sessions. Workaround?
| From: | bvr | Date: | Sat, 30 Mar 2002 12:58:35 +0000 |
| Subject: | Re: Security hole using cookies for sessions. Workaround? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-90769@lists.php.net to get a copy of this message | ||
Three tips:
- Let the session expire after X secs.
- Use BODY's ONUNLOAD attribute/JS event handler
- Provide a 'Logout' button.
bvr.