Sessions in PHP: prevent session fixation attacks
Access the full course ➤ https://davehollingworth.net/mvcauthy
Part of the course "Build a Complete Registration and Login System using PHP MVC".
A session fixation attack is when an attacker exploits vulnerabilities on a website to gain access to a user's account. They do this by getting the user to use a session that the attacker has access to. There are several ways they could do this, for example using a shared computer in a library, or by getting the user to run code that sets their session cookie.
See how this works and how to prevent it in this video.
