PHP Session Hijacking

Continuing on from session regenerate ID, this article talks about steps you can take to further improve session security. We’ve already seen the benefits that session_regenerate_id() can offer, but what if someone hijacks the session rather than fixing it.

(more...)