note 98390 deleted from session.security by peehaa
| From: | peehaa@php.net | Date: | Mon, 08 Jul 2013 19:44:29 +0000 |
| Subject: | note 98390 deleted from session.security by peehaa | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-195508@lists.php.net to get a copy of this message | ||
Note Submitter: saamde at gmail dot com
----
One thing I do is encrypt everything server side that passes into my $_SESSION array. This might
be overkill, but if anyone can see or gets access to my $_SESSION array it'll be encrypted
gibberish and my system won't process anything coming from the $_SESSION array unless it
matches my encryption key.