Forum Moderators: coopster

Message Too Old, No Replies

In my pursuit to make my site more secure

         

impact

2:02 am on Sep 19, 2009 (gmt 0)

10+ Year Member



Hello,

I am very new to PHP. I have seen many post in this forum discussion about how secure sessions and other component of a site. So this would be my quest to make my site more secure.

First of all, some one proposed an idea about hashing up some thing that dont change often. Well, I guess, in any member site userid/userEmail wont change soon. So my question is how do i hash my member's email id?

some thing like this?
session_start();
$_session('sessionID') = md5($email);

I have more question to ask but for now I will go slow and step by step.

Thank you,

d40sithui

3:47 am on Sep 19, 2009 (gmt 0)

10+ Year Member



You are close, but it's

session_id(md5($email));

FYI if you're new to PHP, session security is probably something you would not want to deal with yet. PHP Sessions as they exist are relatively secure without additional work.