note 10325 modified in Session handling functions by jmoore
| From: | jmoore@php.net | Date: | Thu, 28 Dec 2000 09:00:02 +0000 |
| Subject: | note 10325 modified in Session handling functions by jmoore | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-9148@lists.php.net to get a copy of this message | ||
To get more secure session IDs, here is what I use on GNU/linux :
ini_alter("session.cookie_lifetime", "86400");
ini_alter("session.entropy_file","/dev/urandom");
ini_alter("session.entropy_length", "512");
You can also use /dev/random instead of /dev/urandom but it's a slower.
http://www.php.net/manual/session-handling-functions.php