note 10325 deleted from ref.session by nlopess
| From: | nlopess@php.net | Date: | Fri, 12 Mar 2004 14:43:50 +0000 |
| Subject: | note 10325 deleted from ref.session by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-66731@lists.php.net to get a copy of this message | ||
Note Submitter: j@rtchat.com
----
To get more secure session IDs, here is what I use on GNU/linux :
ini_alter("session.cookie_lifetime", "86400");
ini_alter("session.entropy_file","/dev/urandom");
ini_alter("session.entropy_length", "512");
You can also use /dev/random instead of /dev/urandom but it's a slower.