FUDforum: comp.lang.php » Best practice, (secure), to save session data?

Home » Imported messages » comp.lang.php » Best practice, (secure), to save session data?

Show: Today's Messages :: Polls :: Message Navigator

Re: Best practice, (secure), to save session data? [message #178446 is a reply to message #178412]

Mon, 18 June 2012 18:02

Chris Davies
Messages: 6
Registered: June 2012

Karma:

Junior Member

Jerry Stuckle <jstucklex(at)attglobal(dot)net> wrote:
> As I stated - this is not correct. No one needs to "brute force the
> data string" to get logged in - all they have to do is send the cookie.

My original quote suggested option 2 as getting access to the data stored
in the cookie. Real data stored in the cookie, not a session value that
would/could get you access to the data stored on the website. That you
might also be able to log in is a potential side-effect and was (from
my perspective, at least) irrelevant.

Chris

Report message to a moderator

[Message index]

		Best practice, (secure), to save session data? By: Simon on Thu, 14 June 2012 08:35
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Thu, 14 June 2012 11:46
		Re: Best practice, (secure), to save session data? By: Chris Davies on Thu, 14 June 2012 12:52
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Thu, 14 June 2012 16:30
		Re: Best practice, (secure), to save session data? By: Chris Davies on Fri, 15 June 2012 07:46
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Fri, 15 June 2012 11:04
		Re: Best practice, (secure), to save session data? By: Chris Davies on Fri, 15 June 2012 15:20
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Fri, 15 June 2012 20:25
		Re: Best practice, (secure), to save session data? By: Chris Davies on Mon, 18 June 2012 18:02
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Mon, 18 June 2012 19:13
		Re: Best practice, (secure), to save session data? By: Chris Davies on Mon, 18 June 2012 22:12
		Re: Best practice, (secure), to save session data? By: Jerry Stuckle on Tue, 19 June 2012 01:30
		Re: Best practice, (secure), to save session data? By: Arno Welzel on Tue, 19 June 2012 06:37
		Re: Best practice, (secure), to save session data? By: Arno Welzel on Fri, 15 June 2012 20:44

Previous Topic:	Stats comp.lang.php (last 7 days)
Next Topic:	Is spl_object_hash unique in the SQL sense? Can it be used as a unique SQL db column?

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Nov 26 16:52:19 GMT 2024

Total time taken to generate the page: 0.05208 seconds