# Session Security manual page is updated

- Thread: https://externals.io/message/95967
- Original archive: https://news-web.php.net/php.internals/95967
- Started by Yasuo Ohgaki on 2016-09-13T01:50:13+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #95967 — Yasuo Ohgaki — 2016-09-13T01:50:13+00:00

URL: https://externals.io/message/95967#95967

Hi all,

I've updated session security manual page a lot.
http://php.net/manual/en/session.security.php

Some of us do not realize importance of non adoptive session
management and timestamp management. e.g.
https://wiki.php.net/rfc/precise_session_management
https://wiki.php.net/rfc/session-use-strict-mode  I've tried to
explain why they are important and mandatory for session security.

Comments, questions, corrections and additions are appreciated!

Current session manager is half broken. I would like to correct
session module behavior in near future.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net