Modifying PHP SESSION values - PHP Server Side Scripting forum at WebmasterWorld - WebmasterWorld

Forum Moderators: coopster

Message Too Old, No Replies

Modifying PHP SESSION values

Is it possible for a user to modify his/her php session?

asantos

5:03 pm on Apr 5, 2006 (gmt 0)

10+ Year Member

Is it possible for a user (hacker) to modify his/her PHP SESSION variable values from the client side?

jatar_k

5:59 pm on Apr 5, 2006 (gmt 0)

WebmasterWorld Administrator

10+ Year Member

no, session data is stored on the server. They can mess with the session id to attempt to hijack another active session but that's it

asantos

6:16 pm on Apr 5, 2006 (gmt 0)

10+ Year Member

Thanks!