Posted by Philip Hallstrom on 10/10/05 21:38

> How secure is it to save a password in $_SESSION.
>
> i.e. $_SESSION['password']
>
> is it safe and is it practical?

Probably not. If you're on a shared server, I could write a PHP script to
look in /tmp and read the contents of every session file there...

-philip

• Next in forum: Re: [PHP] storing passwords in $_SESSION
• Prev in forum: RE: [PHP] storing passwords in $_SESSION
• Thread view: Re: [PHP] storing passwords in $_SESSION

[Reply to this message]