Session的crypt安全防范方法研究

Research on the Method about Session Security Based on Crytp

根据Session工作原理和c函数的特性,分析了P中Session欺骗与攻击手段,并较有针对性地在防范Session攻击的技术中结合c函数,从而提出了一个较为有效。

According to the working principle of Session and the characteristics of the function about crypt, this paper analysis the Session spoofing and attack means in PHP, and then specially combining with the function of crypt in the Session attack prevention technology, so that it proposes a more effective, practical and preventive measures.