Re: [PHP] sessions security (no problems just question)

2003-06-14 Thread vh
JH> are associated with a specific id. First, URLs carrying session ids. If JH> you link to an external site, the URL including the session id might be JH> stored in the external site's referrer logs. Second, a more active JH> attacker might listen to your network traffic. If it is not encrypted, J

Re: [PHP] sessions security (no problems just question)

2003-06-14 Thread Jeff Harris
On Jun 14, 2003, "Ryan A" claimed that: |Hi, |I have been reading up on the old discussions on this list as i was very |busy for the past few daysand i saw a very intresting topic regarding |sessions and security. | |I really didnt understand some of the things you guys wrote on "hi-jacking a

[PHP] sessions security (no problems just question)

2003-06-14 Thread Ryan A
Hi, I have been reading up on the old discussions on this list as i was very busy for the past few daysand i saw a very intresting topic regarding sessions and security. I really didnt understand some of the things you guys wrote on "hi-jacking a session"...do you have any examples of this? Ho