Is there any way for a hacker to get access to a site's session variables? Is there any way for them to "create" a session variable from outside the server?Not directly, the only way session variables can be set on the server is through code. After all, session data is stored on the server, not in a DB or remote file.That is what I thought but I just wanted to get confirmation.
Hacking Session Variables
- Thread starter liunx
- Start date