note 20156 added to function.session-start
| From: | themack at NOSPAMbitch-please dot com | Date: | Mon, 25 Mar 2002 03:20:25 +0000 |
| Subject: | note 20156 added to function.session-start | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-28155@lists.php.net to get a copy of this message | ||
Im wondering how secure it is to carry along a $_SESSION[] variable called accesslevel to control
site area access. Besides the obvious possibilty of a session takeover, are there any other risks
(can POSTS be spoofed?, etc)?
--
http://www.php.net/manual/en/function.session-start.php
http://master.php.net/manage/user-notes.php?action=edit+20156
http://master.php.net/manage/user-notes.php?action=delete+20156
http://master.php.net/manage/user-notes.php?action=reject+20156