Re: note 8493 added to Session handling functions

You should post support questions to the PHP general list, not to the manual annotation system. See the "Support" page at php.net for more info. As for your question. How about having the session IDs and a cookie that should be used to generate a key that you have in a db? A kludge but might be useful. --- ori@chikki.net wrote: > is there a way to stop session hijacking? > > If a user is authenticated using a session, there is > nothing stopping in finding the session id, > appending it to the URL in a new browser and taking > over their session. > > I tried using the REMOTE_ADDR field, but some ISP > POST form variables from a different IP to GET > requests and, users using a proxy are prone to > error. > > Any ideas would be great. > > http://www.php.net/manual/ref.session.php > > > -- > PHP Notes Mailing List (http://www.php.net/) > To unsubscribe, e-mail: > php-notes-unsubscribe@lists.php.net > For additional commands, e-mail: > php-notes-help@lists.php.net > To contact the list administrators, e-mail: > php-list-admin@lists.php.net > ===== --- Jesus M. Castagnetto (jcastagnetto@yahoo.com) __________________________________________________ Do You Yahoo!? Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/