Is it possible to find out if any website is declaring $_SESSION?
If so, get a list of $_SESSION name?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Is it possible to find out if any website is declaring $_SESSION?
If so, get a list of $_SESSION name?
If by “session name” you mean “the name of a cookie used to hold the token that associates a session with a browser” then make an HTTP request to the site, see if you get a cookie back, apply some heuristics to guess if it is a session token or some other piece of data.
Flaws:
If you mean “The pieces of data that are stored in the session”, then that is impossible. The data is kept entirely on the server and only the session id token is given to the client — that is the point of sessions.