An attacker somehow obtains an unsuspecting user’s SID and then using it to impersonate the user inorder to gain potentially sensitive information. This attack is known as.

A) session-fixation B) session-fixing C) session-hijack D) session-copy

Answer & Solution

Correct Answer: Option A

You can minimize this risk by regenerating the session ID on each request while maintaining the session-specified data. PHP offers a convenient function named session_regenerate_id() that will replace the existing ID with a new one.

Question posted by Examveda

Community

Join the Discussion

Join the discussion

Login to post a comment or share your explanation.

No comments yet Be the first to discuss this question.

Keep Learning

An attacker somehow obtains an unsuspecting user s SID and then...

An attacker somehow obtains an unsuspecting user’s SID and then using it to impersonate the user inorder to gain potentially sensitive information. This attack is known as.

Join the Discussion

Related Questions on HTML Forms Handling