search

sturnbull / piktur

CS9163 project
2 stars 0 forks source link

Better session handling #16

Closed enasni closed 11 years ago

enasni commented 11 years ago

Current session handling is weak and is susceptible to session hijacking. Implement a method to help deter this possibility.

enasni commented 11 years ago

Updated signin.php to create a unique session token cookie.

Updated signout.php to destroy the token cookie on logout.

Updated global.inc to validate client based on token cookie and existing session state.