note 58895 added to ref.session
| From: | Bram at osu1 dot php dot net | Date: | Sat, 19 Nov 2005 16:39:57 +0000 |
| Subject: | note 58895 added to ref.session | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-98810@lists.php.net to get a copy of this message | ||
I just noticed that it's possible to access the same session through multiple apache virtual
hosts.
So keep this in mind when using sessions for anything sensitive, and make sure to encrypt the data
(using the mcrypt functions for example, when available).
----
Manual Page -- http://www.php.net/manual/en/ref.session.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+58895
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=non-english
Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes&reason=already+in+docs
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+58895&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+58895&report=yes
Search -- http://master.php.net/manage/user-notes.php