Re: Sequrity without HTTPS?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--- Peter Lauri <peter@xxxxxxxx> wrote:
> Can someone from outside set a $_SESSION variable with some
> "hacker" techniqe?

For all practical purposes, no. Session data is kept on the server and
therefore less exposed and less vulnerable than other data.

Chris

=====
Chris Shiflett - http://shiflett.org/

PHP Security - O'Reilly     HTTP Developer's Handbook - Sams
Coming February 2005        http://httphandbook.org/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux