Member Avatar for veledrom

Hi,

What is the best way of securing $_SESSIONs in PHP page that prevents $_SESSION spoofing? Any example!

Thanks

  • 2 Contributors
  • 1 Reply
  • 251 Views
  • 10 Hours Discussion Span
  • Latest Post Latest Post by amd_k8
Member Avatar for amd_k8

The most common way would be to make a unique id for the session. For example create a hash from users ip and browser he uses. Regenerate session id's after logout, set session timeout and so on.

Edited by amd_k8 because: n/a
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.