RE: [PHP4BETA] session security?
| From: | Bryan Batchelder | Date: | Sun, 05 Dec 1999 23:05:00 +0000 |
| Subject: | RE: [PHP4BETA] session security? | ||
| References: | 1 | Groups: | php.version4 |
| Request: | Send a blank email to php-version4+get-7475@lists.php.net to get a copy of this message | ||
So is a session created through an SSL connection secure? Are the URLs
encrypted?
What is the preferred method of doing user authentication, and then storing
that the user is authentic?
--Bryan
-----Original Message-----
From: rasmus@php.net [mailto:rasmus@php.net]
Sent: Sunday, December 05, 1999 1:22 PM
To: Cris Daniluk
Cc: php4beta@lists.php.net
Subject: Re: [PHP4BETA] session security?
> It's a problem if people are crawling around in everyone else's sessions,
> don't you think? That's pretty insecure...
An md5 session id is not trivial to guess.
-Rasmus
--
PHP 4.0 Beta Mailing List <http://www.php.net/version4/>
To unsubscribe, e-mail: php4beta-unsubscribe@lists.php.net
For additional commands, e-mail: php4beta-help@lists.php.net
To contact the list administrators, e-mail: php4beta-admin@lists.php.net