Sessions
| From: | mabat | Date: | Mon, 28 Apr 2003 19:09:51 +0000 |
| Subject: | Sessions | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-19689@lists.php.net to get a copy of this message | ||
Hello folks!
I've read from PHP manual, what PHP sessions are vulnerable.
What does it mean?
If anybody can show, how sessions could be "hacked"? Where are these
vulnerabilities?
*Of course, session ID could be taken from cookie or command line. But
*it have no use for user (I susspose).
*Yes, theoretically session ID key could be solved and I could somehow
*duplicate ID of another active session... But, theoretically SSH
*could be hacked, I've heard...
Anyway, I'm troubled.
--
Best regards,
mabat mailto:sasha@xxi.co.il