Can session value be hacked? -


When I came out without leaving a site, the next time I see the site that I found that I Log in there? How does that server restore the session value to my browser? Is there any chance of hacking in this process? Can the restored session price be stolen by others? Please share your concept about this. Thanks in advance

In all the technologies I'm familiar with web-based session values ​​is stored on the remote server So, hacking your session values ​​will require remote-server hacking The fact that you are facing is the fact that your session identifier is stored in cookie (A) so that when you reopen your browser Then the cookie is being used to identify you and to provide access to your remote session. Generally, before the session expires, you have TTL (for the time being), but if you do not explicitly log out then it should be cleaned. If you are really worried you can delete your cookies.


Comments