Therefore, our main solution is to verify the validity of the session ID.
The following is the quoted content:
Copy the code The code is as follows:
if(!isset($_SESSION[' user_agent'])){
$_SESSION['user_agent'] =$_SERVER['REMOTE_ADDR'].$_SERVER['HTTP_USER_AGENT'];
}
/* If the user session ID is fake*/
elseif ($_SESSION[ 'user_agent'] != $_SERVER['REMOTE_ADDR'] .$_SERVER['HTTP_USER_AGENT']) {
session_regenerate_id();
}
?>
The above has introduced the analysis of php session php session security issues, including php session content. I hope it will be helpful to friends who are interested in PHP tutorials.