Which of the following is NOT a recommended practice for secure session management?
- Storing sensitive data in sessions
- Using secure and HTTP-only cookies
- Implementing session timeout
- Generating random and unpredictable session IDs
Storing sensitive data in sessions is not a recommended practice for secure session management. Sensitive data should be stored securely on the server, and only a reference (such as a session ID) should be stored in the session. Storing sensitive data in sessions can expose it to potential session data leakage.
Loading...
Related Quiz
- What function do you use in PHP to start output buffering?
- To create a MySQL table using PHP, you first connect to the MySQL server, select the database, then execute a CREATE TABLE query using the mysqli_query function like $result = mysqli_query($conn, ______).
- Which of the following are advantages of using PHP?
- You want to check which version of PHP you have installed on your server. How would you do this?
- A security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users is called ________.