•Re^5: Is this a secure way to prevent cookie tampering


Don't ask to ask, just ask
	PerlMonks

•Re^5: Is this a secure way to prevent cookie tampering

by merlyn (Sage)

on Jun 29, 2004 at 16:35 UTC ( [id://370539]=note: print w/replies, xml )

Need Help??

in reply to Re^4: Is this a secure way to prevent cookie tampering
in thread Is this a secure way to prevent cookie tampering

Having the id as an integer allows for easy referencing from other tables. There is also the cosmetic appeal of seeing how many sessions you have gone through...

Then just send your strong secret over the wire, and use a database table to map your strong secret to a simple session ID. That'll help you reject bad secrets faster too, or even make it possible to change the secret every minute without messing up the sessions.

-- Randal L. Schwartz, Perl hacker
Be sure to read my standard disclaimer if this is a reply.