New answers tagged session-fixation
A lot depends on what it is your trying to do and what the risks are associated with session hijacking. Generally, if you have a real need to ensure the session is actually owned by the right user, you would add additional checks, such as username and password etc. The EFF has been doing a bit of work on how you can do browser fingerprinting to track ...
Top 50 recent answers are included