|
|
Posted by joe on 12/21/05 17:41
You probably would want to hash the passwords in the database (e.g.
with sha1) as well as use SSL to encrypt communications between the
browser and the server. PHP session security can be discussed at length
but some issues you should consider are session hijacking, session
fixation, cross-site scripting, cross-site forgery requests, etc.
Navigation:
[Reply to this message]
|