Open glacials opened 11 years ago
http://www.phpfreaks.com/tutorial/php-security
I found the link above has some good tips on expiring sessions and preventing other types of attacks.
On Tuesday, October 1, 2013, Ben Carlsson wrote:
When we get our server we should set the PHP variable session.cookie_lifetime in php.ini to some amount of time we think sessions should expire after.
— Reply to this email directly or view it on GitHubhttps://github.com/skoh-fley/cins548/issues/1 .
When we get our server we should set the PHP config variable
session.cookie_lifetime
inphp.ini
to some amount of time we think sessions should expire after.