admidio
admidio copied to clipboard
Secure PHP Sessions and Cookies
https://paragonie.com/blog/2015/04/fast-track-safe-and-secure-php-sessions http://blog.teamtreehouse.com/how-to-create-totally-secure-cookies http://blog.teamtreehouse.com/how-to-create-bulletproof-sessions
Todos
- [x] Improve security of Cookies (httpOnly, https, path)
- [ ] Session Id regenerate (If privileges changes) => session_regenerate_id()
- [ ] Improve IP binding
@ximex also the question here: What do you want to change in Admidio?
i will implement the other 2 things in another version (v3.3 or v4.0)