zero_ZX Posted July 4, 2010 Share Posted July 4, 2010 Hi, I have this login script, which stores the username in a session upon a successful login. I wondered if it was secure to do that? Can't the user just edit the username in the session and then be loggedin as another user or..? Quote Link to comment Share on other sites More sharing options...
Alex Posted July 4, 2010 Share Posted July 4, 2010 No, the user can not edit session data which is stored on the server, as opposed to cookies which are stored client side. From what you've described there is nothing insecure there. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.