<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <title>Sessions and Security</title> </head> <body><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="session.upload-progress.html">Session Upload Progress</a></div> <div class="next" style="text-align: right; float: right;"><a href="features.session.security.management.html">Session Management Basics</a></div> <div class="up"><a href="book.session.html">Sessions</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div><hr /><div id="session.security" class="chapter"> <h1>Sessions and Security</h1> <h2>Table of Contents</h2><ul class="chunklist chunklist_chapter"><li><a href="features.session.security.management.html">Session Management Basics</a></li><li><a href="session.security.ini.html">Securing Session INI Settings</a></li></ul> <p class="para"> External links: <a href="http://www.acros.si/papers/session_fixation.pdf" class="link external">» Session fixation</a> </p> <p class="para"> HTTP session management is the core of web security. All mitigations should be adopted to make sure sessions are secured. Developers should also enable/use applicable security measures. </p> </div> <hr /><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="session.upload-progress.html">Session Upload Progress</a></div> <div class="next" style="text-align: right; float: right;"><a href="features.session.security.management.html">Session Management Basics</a></div> <div class="up"><a href="book.session.html">Sessions</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div></body></html>
