Is it possible for a malicious user to edit $_SESSION?

后端 未结 7 784
抹茶落季
抹茶落季 2020-12-16 00:02

I save some important info in $_SESSION, not in $_COOKIE. So, my question, is it dangerous? Or is it protected from malicious users trying to edit

7条回答
  •  一向
    一向 (楼主)
    2020-12-16 00:32

    If you're worried about people altering sessions (session hijacking) look into session_regenerate_id()

提交回复
热议问题