FUDforum: comp.lang.php » Best practice, (secure), to save session data?

Home » Imported messages » comp.lang.php » Best practice, (secure), to save session data?

Show: Today's Messages :: Polls :: Message Navigator

Re: Best practice, (secure), to save session data? [message #178409 is a reply to message #178408]

Fri, 15 June 2012 15:20

Chris Davies
Messages: 6
Registered: June 2012

Karma:

Junior Member

Jerry Stuckle <jstucklex(at)attglobal(dot)net> wrote:
> I read it. The thing you miss is the hacker doesn't need to decode the
> encrypted data in the cookie. All he needs to do is send it - just like
> the original client would.

You're (still?) missing my differentiator between this and a session
cookie.

> He won't have the password - but he doesn't need it.

It wasn't about having a password (implicit with the cookie or otherwise),
it was having access to the data stored directly in the cookie itself.

Chris

Report message to a moderator

[Message index]

		Best practice, (secure), to save session data? By: Simon on Thu, 14 June 2012 08:35
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Thu, 14 June 2012 11:46
		Re: Best practice, (secure), to save session data? By: Chris Davies on Thu, 14 June 2012 12:52
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Thu, 14 June 2012 16:30
		Re: Best practice, (secure), to save session data? By: Chris Davies on Fri, 15 June 2012 07:46
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Fri, 15 June 2012 11:04
		Re: Best practice, (secure), to save session data? By: Chris Davies on Fri, 15 June 2012 15:20
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Fri, 15 June 2012 20:25
		Re: Best practice, (secure), to save session data? By: Chris Davies on Mon, 18 June 2012 18:02
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Mon, 18 June 2012 19:13
		Re: Best practice, (secure), to save session data? By: Chris Davies on Mon, 18 June 2012 22:12
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Tue, 19 June 2012 01:30
		Re: Best practice, (secure), to save session data? By: Arno Welzel on Tue, 19 June 2012 06:37
		Re: Best practice, (secure), to save session data? By: Arno Welzel on Fri, 15 June 2012 20:44

Previous Topic:	Stats comp.lang.php (last 7 days)
Next Topic:	Is spl_object_hash unique in the SQL sense? Can it be used as a unique SQL db column?

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Nov 26 21:53:51 GMT 2024

Total time taken to generate the page: 0.05035 seconds