Sessions and cookies have become two of possible features that can be exploited to perform security attacks to PHP sites like PHP Classifieds.
Sessions and cookies are not insecure by themselves, but if they are not used with a certain care, they may be eventually abused by malicious users.
Session/Cookie hijacking abuses can happen when somebody with privileged network access can sniff traffic that goes to potential victim site. Session/Cookie fixation abuses can happen when a site uses the same session identifier or cookie file for the same user before and after he authenticates to log in.
This module provides a solution to prevent these kinds of session/ccokie abuses to prevent that PHP Classifieds become compromised.
New option also added: Remember me on this website This option is based on secure COOKIES and allows your members to save their login password on your classifieds website. |
