1.

Is It More Secure To Use Cookies To Transfer Session Ids?

Answer»

yes, because attacking your WEB site using URL PARAMETERS is much easier than using cookies.
So if you are the SYSTEM administrator of your Web server, you should set session.use_only_cookies=1.
If your Web server is PROVIDED by a hosting service PROVIDER, ask them to set session.use_only_cookies=1.

yes, because attacking your Web site using URL parameters is much easier than using cookies.
So if you are the system administrator of your Web server, you should set session.use_only_cookies=1.
If your Web server is provided by a hosting service provider, ask them to set session.use_only_cookies=1.


Discussion

No Comment Found

Related InterviewSolutions