Posted by Sebastian Lisken on 10/11/65 12:00

Bruno Rafael Moreira de Barros <brunormbarros@gmail.com> wrote:
> Not nasty things, but session stealing.

I know about session stealing. I also know that the session ID can be
transmitted via a query string parameter or via a cookie if the browser
permits it. I presume you know that SID reverts to an empty string in
the latter case.

Sebastian

• Next in forum: $_POST adding whitespace to variable value
• Prev in forum: Re: HTTP POST from PHP using a link
• Thread view: Re: Can SID be trusted?

[Reply to this message]