note 50805 deleted from function.session-start by bjori
| From: | bjori@php.net | Date: | Sun, 16 Apr 2006 00:23:55 +0000 |
| Subject: | note 50805 deleted from function.session-start by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-108214@lists.php.net to get a copy of this message | ||
Note Submitter: msn : kiur / at / wannabe / dot / ee
----
You see, that session_id creator
creates the id from md5-hashed $REMOTE_ADDR and some random numbers.
It is useful because you can check the hashed remote_addr using substr() function.
So there will be less possibilities to hijack the session using the id.