meta user
network profile
| bio | website | |
|---|---|---|
| location | B.C., Canada | |
| age | 22 | |
| visits | member for | 11 months |
| seen | May 14 at 4:29 | |
| stats | profile views | 80 |
|
Apr 21 |
revised |
What should be backedup periodically? explain down/close votes |
|
Apr 21 |
asked | What should be backedup periodically? |
|
Apr 6 |
awarded | Popular Question |
|
Apr 3 |
comment |
What typically is the expiration date of a session cookie? just so you know according to the PHP manual the claim that httponly helps against XSS attacks is disputed php.net/manual/en/function.setcookie.php |
|
Apr 3 |
comment |
What typically is the expiration date of a session cookie? I get it now. If I create the session cookie with JavaScript and set the httponly flag, would that be better or still insecure compared to sending the cookie directly from the server? |
|
Apr 3 |
comment |
What typically is the expiration date of a session cookie? Hold on a second. HOLD ON A SECOND! "Don't create the authentication cookie using JavaScript." Why? A user has control over their cookies regardless if it was created by local JavaScript or a client side script (PHP in my case). Note the session itself is created by the server, on the server. I'd really like to be clear on this before I bust my ass off trying to create the cookie with PHP instead of JavaScript =) |
|
Apr 3 |
asked | What typically is the expiration date of a session cookie? |
|
Mar 28 |
asked | How do browsers know which cookie to get? |
|
Mar 26 |
accepted | Does portforwarding present a risk to anonymity? |
|
Mar 22 |
accepted | What is cross-site-scripting? |
|
Mar 22 |
comment |
When checking a session variable to see if a user is logged in, is it enough to check to see if the variable is set? @makerofthings7 must I know about session hijacking to understand what is going on here? |
|
Mar 22 |
accepted | FireFox's restore previous session restores logins authenticated by server's sessions |
|
Mar 22 |
asked | When checking a session variable to see if a user is logged in, is it enough to check to see if the variable is set? |
|
Mar 15 |
awarded | Popular Question |
|
Mar 7 |
revised |
When logging out of a website is anything else required then destroying the session? added info |
|
Mar 7 |
comment |
When logging out of a website is anything else required then destroying the session? Maybe this would be a better fit for Stackoverflow? |
|
Mar 6 |
comment |
When logging out of a website is anything else required then destroying the session? Is it necessary to session_start()? |
|
Mar 6 |
asked | When logging out of a website is anything else required then destroying the session? |
|
Mar 6 |
comment |
FireFox's restore previous session restores logins authenticated by server's sessions I used phpinfo() to check and it has "session.cookie_lifetime 0 0" I'll double check the code but I'm starting to get worried. |
|
Mar 5 |
comment |
FireFox's restore previous session restores logins authenticated by server's sessions It's already set. session.cookie_lifetime=0 :( |
