Shulou(Shulou.com)05/31 Report--

This article mainly introduces php how to configure Cookie encryption related knowledge, the content is detailed and easy to understand, the operation is simple and fast, has a certain reference value, I believe you will get something after reading this php how to configure Cookie encryption article, let's take a look at it.

Description

1. The HTTP header of Cookie transmission in the client browser is also in clear text. By encrypting cookie, you can protect your application against many attacks, such as

2. It is divided into Cookie tampering and cross-application using Cookie.

Cookie tampering: an attacker may try to guess other reasonable cookie values to attack the program.

Use Cookie across applications: incorrectly configured applications may have the same session storage, such as all sessions are stored in the / tmp directory by default, and the cookie of one application may never be reused for another application, as long as the encryption key is different.

Example

Suhosin.cookie.encrypt = On;; the cryptkey should be generated, e.g. With 'apg-m 32'suhosin.cookie.cryptkey = oykBicmyitApmireipsacsumhylWaps1suhosin.cookie.cryptua = Onsuhosin.cookie.cryptdocroot = On;; whitelist/blacklist (use only one); suhosin.cookie.cryptlist = WALLET,IDEASsuhosin.cookie.plainlist = LANGUAGE IPv4 onlysuhosin.cookie.cryptraddr = 0suhosin.cookie.checkraddr = 0Blocking Functions test # # the Session of the default PHP is saved in the tmp path ll-rt / tmp | check the data of a sesson when the grep sess## extension is not enabled. The cat sess_ururh83qvkkhv0n51lg17r4aj6// record is plaintext. # # View the data of a sesson after the extension is opened. The importance of visible encryption for security about "how to configure Cookie encryption for php" This is the end of the article. Thank you for reading! I believe that everyone has a certain understanding of the knowledge of "how to configure Cookie encryption in php". If you want to learn more, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.