php_guest Posted February 6, 2011 Share Posted February 6, 2011 I have a business social network site on hosting server. I am wondering if sessions are enough secure. ini_set('session.use_only_cookies', 1); //this prevent Session Fixation? session_start(); if($_SESSION['loggedIn'] && $_SESSION['userIP']==$_SERVER["REMOTE_ADDR"]) // extra security //user is logged in, assign all data to this profile from session else //user is not logged in, no data are assigned Would you consider that as enough secure? Link to comment https://forums.phpfreaks.com/topic/226884-session-security-question/ Share on other sites More sharing options...
BlueSkyIS Posted February 6, 2011 Share Posted February 6, 2011 yes. Link to comment https://forums.phpfreaks.com/topic/226884-session-security-question/#findComment-1170666 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.