Re: FN-FORUM: dB growth

date posted 22nd September 2006 12:25

On Friday 22 Sep 2006 8:01 am, [EMAIL REMOVED] John wrote:

> How do you use the encrypted session id to stop someone re-setting thei=
r
> company id, presumably I could use something like
>
> Set session("company_id")=3Dnn where
> sessionid=3D01c4234c1f70a20aa90c9d78358c5472

It's not encrypted, it's just a big number. If I want to pretend to be=20
you, I have to guess your big number. =20

Google [cookies sessions security] to find out more.