PHP Session problem with cloud server

There is a very strange issue with PHP session when you prefer session to save in files other than database (normal session). The problem is: some times you can access all the saved session values from $_SESSION and sometimes it returns a empty array. If you refresh 10 times, perhaps 4 times you will get [...]

2 Comments , , , , , , , , , , , ,

Session/Cookie alone does not secure your web application – CSRF

Guess what will happen if you add an image like below in your html page: <img src=”http://mail.google.com/mail/?logout&hl=en”  /> It does not appear in page, but your google account in another window or another tab will get logoff. Now an external website could logout you from your gmail or orkut. IF you coded your website to [...]

0 Comments , , , , , , , , , ,