note 99433 rejected from book.session by danbrown
| From: | danbrown@php.net | Date: | Tue, 17 Aug 2010 16:18:19 +0000 |
| Subject: | note 99433 rejected from book.session by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-171770@lists.php.net to get a copy of this message | ||
Note Submitter: herbigame at googlemail dot com
----
I wonder if it is common practice to use hashed random numbers as session variable names and carry
session information as hashed variables...??
I try to figure out to make the session data stored meaningless to anyone accessing it. I know that
this would slow down the process as whenever a page is built the data stored on the server needs to
be hased and compared with the values in the session,
but I think it would be more useful than using meaningful or even static names for session
variables.
In my script, the name of the session variables for each user would differ and change over time as
new variable names are assigned after an expiration date or after a number of page-referrals.
I would appreciate any comment on this issue.
Sincerely,
Ben