note 85825 deleted from book.session by danbrown
| From: | danbrown@php.net | Date: | Fri, 19 Sep 2008 14:20:39 +0000 |
| Subject: | note 85825 deleted from book.session by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-144550@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
Sessions can be hijacked way to easy, just by copying the value and domain and name it PHPSESSID.
I advise everyone that creates websites with session data, to create a more secure option and check
with IP and browser and store this data in the database.