php session安全问题分析
- WBOYOriginal
- 2016-06-13 12:08:16839browse
因此,我们主要解决的思路是效验session ID的有效性.
以下为引用的内容：
复制代码 代码如下:
if(!isset($_SESSION['user_agent'])){
$_SESSION['user_agent'] =$_SERVER['REMOTE_ADDR'].$_SERVER['HTTP_USER_AGENT'];
}
/* 如果用户session ID是伪造 */
elseif ($_SESSION['user_agent'] != $_SERVER['REMOTE_ADDR'] .$_SERVER['HTTP_USER_AGENT']) {
session_regenerate_id();
}
?>
Statement：
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Previous article：php中session_unset与session_destroy的区别分析Next article：Warning: session_destroy() : Trying to destroy uninitialized