Tim's Weblog
Tim Strehle’s links and thoughts on Web apps, software development and Digital Asset Management, since 2002.
2004-03-08

Notes on PHP Session Security

Harry Fuecks' notes on PHP session security:

"[...] things to watch out for when using sessions for your sites login system;

    1. Shared web servers
    1. XSS exploits
    1. Session IDs in URL
    1. Session Fixation
    1. Sniffing Packets
    1. Cookies are not for session data"