Skip to content

Latest commit

 

History

History
15 lines (12 loc) · 571 Bytes

0502.md

File metadata and controls

15 lines (12 loc) · 571 Bytes

Session fixation - a commonly-used session-based attack - can be prevented simply by giving a user a new session ID whenever they obtain a new level of permission on a site (for instance, after they successfully login). Which PHP function is used to change the ID for an active session?

  • A) session_regenerate_id
  • B) session_close
  • C) session
  • D) session_set
Answer

Answer: A