Jump to content

php session


hamza

Recommended Posts

if it is safe then why people encrypt it...

 

Sessions are secure, as the only thing the user can see is the cookie set with the session ID, They cannot view the actual sessions unless there is a major flaw in your programming. It's standard and conventional programming to not encrypt/hash session variables (See PHP documentation in my sig) and you may use them for whatever you wish, but it should only relate to the current acting session.

 

Storing the user's credentials, credit card info, password etc. are things not to store in active sessions, but they are otherwise as safe as you make them.

Link to comment
https://forums.phpfreaks.com/topic/196174-php-session/#findComment-1030413
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.