sivacohan
V2EX  ›  问与答

现在有靠谱策略应对 cookie 劫持吗?

  •  
  •   sivacohan ·
    PRO
    · Jun 25, 2014 via Android · 3622 views
    This topic created in 4360 days ago, the information mentioned may be changed or developed.
    6 replies    2014-06-26 00:36:37 +08:00
    DreaMQ
        1
    DreaMQ  
       Jun 25, 2014 via iPad
    隐身模式
    michaelzlies
        2
    michaelzlies  
       Jun 25, 2014 via iPad
    httponly
    Rocketime
        3
    Rocketime  
       Jun 25, 2014 via Android
    不用cookie
    sivacohan
        4
    sivacohan  
    OP
    PRO
       Jun 25, 2014 via Android
    @Rocketime 不用cookie怎么保持状态?
    ejin
        5
    ejin  
       Jun 25, 2014
    @sivacohan 这问题太好回答了,你一定知道php里是可以把cookie设置到url里的,因为老手机的wap浏览器是不支持cookie的
    ejin
        6
    ejin  
       Jun 26, 2014
    接楼上,忘记说了要看楼主的cookie是不是劫持,然后用其他ip访问?那样的话只要在会话记录用户ip,验证用户ip即可
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   965 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 34ms · UTC 21:54 · PVG 05:54 · LAX 14:54 · JFK 17:54
    ♥ Do have faith in what you're doing.