sas Thu Dec 19 07:44:07 2002 EDT
Modified files:
/phpdoc/entities global.ent
/phpdoc/en/reference/session reference.xml
Log:
Add link to newly released session fixation paper
Index: phpdoc/entities/global.ent
diff -u phpdoc/entities/global.ent:1.65 phpdoc/entities/global.ent:1.66
--- phpdoc/entities/global.ent:1.65 Wed Dec 18 02:27:37 2002
+++ phpdoc/entities/global.ent Thu Dec 19 07:44:07 2002
@@ -1,6 +1,6 @@
<!-- -*- SGML -*-
- $Id: global.ent,v 1.65 2002/12/18 07:27:37 fmk Exp $
+ $Id: global.ent,v 1.66 2002/12/19 12:44:07 sas Exp $
Contains global "macros" for all the XML documents.
@@ -196,6 +196,7 @@
<!ENTITY url.rfc2183 'http://www.ietf.org/rfc/rfc2183.txt'>
<!ENTITY url.sesam.de
"http://its.siemens.de/lobs/its/techinf/oltp/sesam/manuals/index_gr.htm">
<!ENTITY url.sesam.en
"http://its.siemens.de/lobs/its/techinf/oltp/sesam/manuals/index_en.htm">
+<!ENTITY url.session-fixation "http://www.acros.si/papers/session_fixation.pdf">
<!ENTITY url.socket.faq "http://www.developerweb.net/sock-faq/">
<!ENTITY url.st-threads "http://sourceforge.net/projects/state-threads/">
<!ENTITY url.sleepycat "http://www.sleepycat.com/">
Index: phpdoc/en/reference/session/reference.xml
diff -u phpdoc/en/reference/session/reference.xml:1.26
phpdoc/en/reference/session/reference.xml:1.27
--- phpdoc/en/reference/session/reference.xml:1.26 Tue Dec 17 05:17:29 2002
+++ phpdoc/en/reference/session/reference.xml Thu Dec 19 07:44:07 2002
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.26 $ -->
+<!-- $Revision: 1.27 $ -->
<reference id="ref.session">
<title>Session handling functions</title>
<titleabbrev>Sessions</titleabbrev>
@@ -58,6 +58,9 @@
<section id="session.security">
<title>Sessions and security</title>
+ <para>
+ External links: <ulink url="&url.session-fixation;">Session fixation</ulink>
+ </para>
<para>
The session module cannot guarantee that the information you store
in a session is only viewed by the user who created the session. You need
--
PHP Documentation Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php