9three Posted March 23, 2009 Share Posted March 23, 2009 I've seen a lot code around using a session and assigning a 'fingerprint' to it. This fingerprint usually contains a string (Some store the user agent or some type of info) wrapped with an md5 (sometimes salted) around it. Does anyone find using a fingerprint a need or make them feel more secure? I guess if you md5 a user agent and store it in a database it might come to some use in the sense that if someone was able to hack your database, then that fingerprint would still be secured. I would like your input into this. Open for discussion Link to comment https://forums.phpfreaks.com/topic/150671-session-fingerprint/ Share on other sites More sharing options...
br0ken Posted March 23, 2009 Share Posted March 23, 2009 Fingerprinting is a good idea however I have yet to find a suitable variable to be fingerprinted. For example, you could hash the users IP address but if they are on a shared or dynamic IP, this wont work. You could also hash the browser type but again, this can be faked or can change. If there are any good variables to use someone please shout up as I'm always looking to improve the security of my login scripts. Link to comment https://forums.phpfreaks.com/topic/150671-session-fingerprint/#findComment-791657 Share on other sites More sharing options...
waynew Posted March 23, 2009 Share Posted March 23, 2009 Fingerprinting is a good idea however I have yet to find a suitable variable to be fingerprinted. For example, you could hash the users IP address but if they are on a shared or dynamic IP, this wont work. You could also hash the browser type but again, this can be faked or can change. If there are any good variables to use someone please shout up as I'm always looking to improve the security of my login scripts. Usually I create a fingerprint using a selected string of my own (like a salt) and the browser type. Link to comment https://forums.phpfreaks.com/topic/150671-session-fingerprint/#findComment-791712 Share on other sites More sharing options...
9three Posted March 23, 2009 Author Share Posted March 23, 2009 Anyone else ? Link to comment https://forums.phpfreaks.com/topic/150671-session-fingerprint/#findComment-792163 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.