Posted by Willem Bogaerts on 06/25/07 06:56

>> or in fact PHP session is not 100% safe enought?
>
> A session ID is a hash. By definition hashes can _never_ be 100% unique,

Not entirely true. Generating the hash is not guaranteed to be unique,
but you can check if it already exists and generate another if it does.
I searched the documentation and could not find anything on uniqueness
of session IDs. If somebody has some more info, please point us to it.

Best regards,
--
Willem Bogaerts

Application smith
Kratz B.V.
http://www.kratz.nl/

• Next in forum: fopen GB2312 encoding problem
• Prev in forum: Re: Unix Time and Leap Seconds
• Thread view: Re: How PHP Session ID is proved to be unique?

[Reply to this message]