note 79726 deleted from ref.session by felipe
| From: | felipe@php.net | Date: | Sun, 30 Dec 2007 18:04:28 +0000 |
| Subject: | note 79726 deleted from ref.session by felipe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-134339@lists.php.net to get a copy of this message | ||
Note Submitter: xeonnn at gmail dot com
----
You can build a verry safe session with the following code:
<?php
session_start();
$sessionID = md5(uniqid(rand(), true));
if(isset($_GET['geef']))
{
if(isset($_SESSION['id']) && isset($_GET['sessie']) &&
$_GET['sessie'] == $_SESSION['id'])
{
echo "goed!";
}
else
{
echo "niet hacken kutjong";
}
}
else
{
$_SESSION['id'] = $sessionID;
echo "<a
href='".$_SERVER['PHP_SELF']."?geef&sessie=".$sessionID."'>Sessie
weergave</a>";
}
?>