X-Git-Url: https://git.martlubbers.net/?a=blobdiff_plain;f=report%2Fv3_session.tex;h=de653124f172d2bd1105a323ee975ce67eb9dadc;hb=a3400d1700e841084471bd01f91ddf9234c9413f;hp=ccf2a713e4cac009ee68402fea37b7ac2b8843d7;hpb=332cc6edfadaa06cae8f790b8a0627bef705995e;p=ssproject1617.git diff --git a/report/v3_session.tex b/report/v3_session.tex index ccf2a71..de65312 100644 --- a/report/v3_session.tex +++ b/report/v3_session.tex @@ -81,7 +81,7 @@ \begin{result} The session ids are generated by \PHP{} trough the \code{session\_start} function. These are indeed sufficiently long, random and unique. There are - no known attacks against these session ID's. + no known attacks against these session IDs. \end{result} @@ -91,7 +91,7 @@ appropriately restrictive value for the application, and authentication session tokens additionally set the \code{HttpOnly} and \code{secure} attributes. \begin{result} - There is just one cookie for tha application and it's path includes the whole + There is just one cookie for the application and it's path includes the whole site. However this seems appropriate. The \code{HttpOnly} and \code{secure} attributes are not set for this cookie. \end{result}