I\'ve built a custom auth system for CodeIgniter (I know there are various 3rd party libraries available but this is for my own benefit) but I\'m worried I\'m missing something obvious that could brin
I\'m developing a website (with a shopping cart) on top of Codeigniter, and want to use the sess_use_database setting to make it more difficult for users to hack a shopping cart session.
I have an application that has been working with session variables no problem. I start the session before the headers on every page that uses when, it has been fine then it 开发者_开发技巧seems all of
I am working in Struts and jsp. I need to keep my cookies turned off as i needmulti-tab browser support. So a solution is required to hide the session id in the URL and still keep track of the session
in one mediaWiki project it happens to me that after a user has been idle for some period (like 20 minutes) he gets automatically logged out.
I have set the following property in websphere for the js开发者_开发问答ession cookie com.ibm.ws.webcontainer.HTTPOnlyCookies.
In my grails application using shiro, I\'m using cookies to store the session data including authorization.
This question already has answers here: Closed 12 years ago. Possible Duplicate: Allowed characters in cookies
Is it possible to get session cookie name in medium trust level? The code below works in full trust, but throws a security exception in medium trust level.
I\'m building an API with no server-side authentication. A unique key (assume the key is very long and impossible to guess) will be generated for the session, but no cookie will be set on the client.