Reputation
580
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
7 21
Impact
~28k people reached

Jun
28
accepted Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
@BartvanHeukelom Why wouldn't they? When someone logs out you don't need anything in the session for that particular user,do you?
Jun
27
revised Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
deleted 2 characters in body
Jun
27
comment Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
Thanks. When logout happens all sessions will be destroyed. So why do you suggest to use session_regenerate_id(true) inside logout?
Jun
27
asked Will session_regenerate_id() without true parameter improves security? Should I use it right before login?
Jun
25
revised Why don't we use MAC address instead of IP address?
edited title
Jun
24
awarded  Popular Question
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
It is not for internal usage. Suppose we have a commercial website. @curiousguy
Jun
1
comment Does Self-signed certificate differ from CA from a security point of view?
+1 thanks, so you mean hosting companies that you have worked for don't offer Verisign, but they charge customers for the verisign cost. Is that what you say?
Jun
1
accepted Does Self-signed certificate differ from CA from a security point of view?
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
thanks. Different answers have been given you say that from security standpoint it does not differ, but the others (@Mike Scott and @olvrlrnz ,..) mentioned it is not. I'm in the dark now!
May
31
comment Does Self-signed certificate differ from CA from a security point of view?
You said: Any attacker can create a self-signed cert for your domain. Are you sure about this? Do you have any solid proof?
May
31
asked Does Self-signed certificate differ from CA from a security point of view?
May
24
accepted Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
May
24
comment Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
see the edit part.
May
24
revised Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
Made question more clear.
May
24
asked Is spam more likely to be sent to info@example.com? Would I be better off using a different address?
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 good examples, thanks
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
+1 I've read it thoroughly. it really opened my eyes.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Are you working in PHP.NET? If your answer is negative then I should say read the whole question and comments carefully.