Posted by howa on 06/25/07 13:33

yes

so assuming we don't know the uniqueness of PHP session, we can
implement those stuffs ourself if we really want to...


On 6 25 , 2 56 , Willem Bogaerts
<w.bogae...@kratz.maardanzonderditstuk.nl> wrote:
> >> or in fact PHP session is not 100% safe enought?
>
> > A session ID is a hash. By definition hashes can _never_ be 100% unique,
>
> Not entirely true. Generating the hash is not guaranteed to be unique,
> but you can check if it already exists and generate another if it does.
> I searched the documentation and could not find anything on uniqueness
> of session IDs. If somebody has some more info, please point us to it.
>
> Best regards,
> --
> Willem Bogaerts

[Back to original message]