note 115476 added to book.session

Be aware that some of the latest browsers now treat session cookies as if they were persistent regardless of how you create them. This makes it a dangerous exercise to rely on a session terminating when the browser closes. You must now (somehow or other) forcibly destroy any cookie-based logon session before the browser is closed, otherwise even after a computer reboot an unauthorised person may be able to masquerade as the previous site visitor. (This has nothing to do with browsers saving passwords) http://iwrconsultancy.co.uk/sessionvuln/ ---- Server IP: 72.52.91.14 Probable Submitter: 212.159.68.116 ---- Manual Page -- http://php.net/manual/en/book.session.php Edit -- https://master.php.net/note/edit/115476 Del: integrated -- https://master.php.net/note/delete/115476/integrated Del: useless -- https://master.php.net/note/delete/115476/useless Del: bad code -- https://master.php.net/note/delete/115476/bad+code Del: spam -- https://master.php.net/note/delete/115476/spam Del: non-english -- https://master.php.net/note/delete/115476/non-english Del: in docs -- https://master.php.net/note/delete/115476/in+docs Del: other reasons-- https://master.php.net/note/delete/115476 Reject -- https://master.php.net/note/reject/115476 Search -- https://master.php.net/manage/user-notes.php