mirror of
https://github.com/sigmasternchen/php-doc-en
synced 2025-03-16 08:58:56 +00:00
Improve session.referer_check documentation.
git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@30427 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
parent
faba3ac0a2
commit
b3c481736c
1 changed files with 4 additions and 6 deletions
|
@ -274,12 +274,10 @@ close
|
|||
</listitem>
|
||||
<listitem>
|
||||
<simpara>
|
||||
<literal>session.referer_check</literal> determines whether
|
||||
session ids referred to by external sites will be
|
||||
eliminated. If session ids are propagated using the URL method,
|
||||
users not knowing about the impact might publish session
|
||||
ids. This can lead to security problems which this check tries
|
||||
to defeat. Defaults to <literal>0</literal>.
|
||||
<literal>session.referer_check</literal> contains the substring you
|
||||
want to check each HTTP Referer for. If the Referer was sent by the
|
||||
client and the substring was not found, an embedded session id will
|
||||
be marked as invalidate. Defaults to the empty string.
|
||||
</simpara>
|
||||
</listitem>
|
||||
<listitem>
|
||||
|
|
Loading…
Reference in a new issue