News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Oscar Merida's Blog:
Avoiding frustration with PHP Sessions
March 30, 2007 @ 11:28:00

On his blog, Oscar Merida has a quick new post those just starting out with sessions should take a look at. He gives four quick tips of things to watch out for that can help your development process go smoother.

PHP's support for sessions make adding "state" to your web application super easy. Bus because the illusion of state is maintained by storing a Session ID via a user's cookies, you might find yourself losing potentially productive hours chasing down bizarre client side bugs or opening up a potential security hole. Here are 4 tips to help you avoid wasting your time and securing your site.

Items on the list are:

  • Don't use underscores in host names
  • Commit your sessions before redirects
  • Prevent session fixation (great security tip!)
  • Don't expose session_id's
Check out the comments - there's some good recommendations in there as well.

0 comments voice your opinion now!
frustration session avoid recommend underscore fixation expose frustration session avoid recommend underscore fixation expose


blog comments powered by Disqus

Similar Posts

Community News: Laracon EU 2013 Session Videos Posted

Mastering Zend Framework: Gary Hockinís Maximising Zend Framework 2 Performance Talk (Review)

Sebastian Bergmann's Blog: emPHPower @ OSCON

ITNewb.com: Generating Session IDs and Random Passwords with PHP

Tobias Schlitt's Blog: Free eZ components sessions -2- [Update]


Community Events

Don't see your event here?
Let us know!


laravel5 api extension php7 introduction version security release opinion interview community example series library voicesoftheelephpant framework laravel podcast list language

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework