sas Thu Dec 19 07:44:07 2002 EDT Modified files: /phpdoc/entities global.ent /phpdoc/en/reference/session reference.xml Log: Add link to newly released session fixation paper Index: phpdoc/entities/global.ent diff -u phpdoc/entities/global.ent:1.65 phpdoc/entities/global.ent:1.66 --- phpdoc/entities/global.ent:1.65 Wed Dec 18 02:27:37 2002 +++ phpdoc/entities/global.ent Thu Dec 19 07:44:07 2002 @@ -1,6 +1,6 @@ <!-- -*- SGML -*- - $Id: global.ent,v 1.65 2002/12/18 07:27:37 fmk Exp $ + $Id: global.ent,v 1.66 2002/12/19 12:44:07 sas Exp $ Contains global "macros" for all the XML documents. @@ -196,6 +196,7 @@ <!ENTITY url.rfc2183 'http://www.ietf.org/rfc/rfc2183.txt'> <!ENTITY url.sesam.de "http://its.siemens.de/lobs/its/techinf/oltp/sesam/manuals/index_gr.htm"> <!ENTITY url.sesam.en "http://its.siemens.de/lobs/its/techinf/oltp/sesam/manuals/index_en.htm"> +<!ENTITY url.session-fixation "http://www.acros.si/papers/session_fixation.pdf"> <!ENTITY url.socket.faq "http://www.developerweb.net/sock-faq/"> <!ENTITY url.st-threads "http://sourceforge.net/projects/state-threads/"> <!ENTITY url.sleepycat "http://www.sleepycat.com/"> Index: phpdoc/en/reference/session/reference.xml diff -u phpdoc/en/reference/session/reference.xml:1.26 phpdoc/en/reference/session/reference.xml:1.27 --- phpdoc/en/reference/session/reference.xml:1.26 Tue Dec 17 05:17:29 2002 +++ phpdoc/en/reference/session/reference.xml Thu Dec 19 07:44:07 2002 @@ -1,5 +1,5 @@ <?xml version="1.0" encoding="iso-8859-1"?> -<!-- $Revision: 1.26 $ --> +<!-- $Revision: 1.27 $ --> <reference id="ref.session"> <title>Session handling functions</title> <titleabbrev>Sessions</titleabbrev> @@ -58,6 +58,9 @@ <section id="session.security"> <title>Sessions and security</title> + <para> + External links: <ulink url="&url.session-fixation;">Session fixation</ulink> + </para> <para> The session module cannot guarantee that the information you store in a session is only viewed by the user who created the session. You need
-- PHP Documentation Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php