note 20156 rejected from function.session-start by alindeman
| From: | alindeman@php.net | Date: | Mon, 25 Mar 2002 03:36:26 +0000 |
| Subject: | note 20156 rejected from function.session-start by alindeman | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-28158@lists.php.net to get a copy of this message | ||
Im wondering how secure it is to carry along a $_SESSION[] variable called accesslevel to control
site area access. Besides the obvious possibilty of a session takeover, are there any other risks
(can POSTS be spoofed?, etc)?