Posted by Philip Hallstrom on 10/10/05 21:38

> How secure is it to save a password in $_SESSION.
>
> i.e. $_SESSION['password']
>
> is it safe and is it practical?

Probably not. If you're on a shared server, I could write a PHP script to
look in /tmp and read the contents of every session file there...

-philip

[Back to original message]