Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have some confusion with session handling in PHP. I know how to regenerate new session ID in PHP using session_regenerate_id();, but I don’t understand why and when I should regenerate a new session ID.
I have been googling for some time without avail. No one explains why I need to regenerate a new session ID.
Can someone explain why and when I would need to regenerate a new session ID?
The reason that regenerating sessions is seen as good, is that it tries to prevent session fixation (or at least limit the damage).