Re: [PHP] Security hole using cookies for sessions. Workaround?

[bvr]

Three tips:

- Let the session expire after X secs.
- Use BODY's ONUNLOAD attribute/JS event handler
- Provide a 'Logout' button.

bvr.




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php