How to avoid Identity Theft in Zend Framework with Zend Auth - Z...

Courtesy Planet PHP  Thu, 03/04/2010 - 22:30

While there are many major security issues possible in a web application, there is a particular one that bugged me for some time.

The Identity theft - Broken account and session management issue. Why can one so easily still my session id cookie and suddenly gain access to my account in one particular web application?

I know it its rather impossible to make this 100% hack-proof but I strongly believe that the system should be improved as much as possible....


 

More related items

Odafe Ojenikoh's Blog: Interactive PHP CLI...
Odafe Ojenikoh has submitted a post he's written up showing how to create a command line PHP application with the help of the Zend Framework and it's Zend_Form elements. Over the weekend,...

Rob Allen's Blog: One-to-Many Joins with...
Rob Allen has a tip for the Zend Framework users out there using the Zend_Db module to connect to their database resources - how to do a one to many join with the help of...

Zend Framework application.ini Cheat-Sheet -...
With the release of Zend Framework 1.8 came the long awaited component for bootstrapping a Zend Framework application. Many different bootstrapping-solutions became obsolete with...


 

Post new comment

The content of this field is kept private and will not be shown publicly.
computer-internet.marc8.com