jwilson122 Posted October 19, 2010 Share Posted October 19, 2010 Hey, I was wondering if anyone could help me out with tips on protecting my site from Session / Cookie Hijacking or some login function to help secure it more! My entire site is in pure PHP / MySQL. Thanks in advance! Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/ Share on other sites More sharing options...
Adam Posted October 19, 2010 Share Posted October 19, 2010 When you say "pure PHP / Mysql", do you mean you're using custom database sessions, or standard PHP sessions? Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1123982 Share on other sites More sharing options...
jwilson122 Posted October 19, 2010 Author Share Posted October 19, 2010 When you say "pure PHP / Mysql", do you mean you're using custom database sessions, or standard PHP sessions? just standard php sessions: //example $uid = "1"; $_SESSION['user_id'] = $uid; Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1123984 Share on other sites More sharing options...
Adam Posted October 19, 2010 Share Posted October 19, 2010 Have a read of this: http://talks.php.net/show/phpworks2004-php-session-security/0 Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1123999 Share on other sites More sharing options...
jwilson122 Posted October 19, 2010 Author Share Posted October 19, 2010 Have a read of this: http://talks.php.net/show/phpworks2004-php-session-security/0 hmm. Thanks! So.. if I do everything in this step guide my site will be completely secure from hackers? For the login part at least lol Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1124008 Share on other sites More sharing options...
Adam Posted October 19, 2010 Share Posted October 19, 2010 No that's to protect you from session hijacking.. For a good thorough look into security I'd recommend reading the security tutorial on the main PHPFreaks site. Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1124065 Share on other sites More sharing options...
jwilson122 Posted October 19, 2010 Author Share Posted October 19, 2010 No that's to protect you from session hijacking.. For a good thorough look into security I'd recommend reading the security tutorial on the main PHPFreaks site. hmm, yeah I already read that. Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1124068 Share on other sites More sharing options...
Adam Posted October 19, 2010 Share Posted October 19, 2010 Okay. Well security is a wide subject, do you have a particular area or piece of code you'd like more help with? Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1124071 Share on other sites More sharing options...
jwilson122 Posted October 19, 2010 Author Share Posted October 19, 2010 Okay. Well security is a wide subject, do you have a particular area or piece of code you'd like more help with? Well... yeah, I'm gonna finish my function script then post it here so everyone could tell me if Im missing anything or something. Quote Link to comment https://forums.phpfreaks.com/topic/216267-hijacking/#findComment-1124111 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.