Possible Duplicate:
Can you secure a web app from FireSheep without using SSL?

How can I prevent someone on same network from stealing SESSIONID and using it in his own browser (it would mean that he can "log in" without any passwords) without using HTTPS ?

Is there any way in PHP to check/prevent/detect it?

If it's more suitable for StackOverflow, please move it someone

  • Hi @genesis, welcome to the site! I closed this question, since it's already been well answered in several other questions on this site - see esp. the linked question. Also please read the FAQ, and browse through the site a bit - I'm sure you'll find more relevant information. – AviD Jun 22 '11 at 21:42
  • Sorry, I did not found anything by search. I think I was searching bad keywords. Execuse me – genesis Jun 22 '11 at 21:43