state variables of webuser

dimis283 · October 2, 2009, 1:25pm

I want to secure the state variables of webuser, what is the best way?

pestaa · October 3, 2009, 11:58am

The best way to secure them is to restrict their visibility. Store them only on server-side and you’re done.

dimis283 · October 3, 2009, 4:05pm

I use the remember me function of Yii, so the only way is to use Cookie Attack Prevention?

pestaa · October 3, 2009, 6:46pm

Well, if you are afraid of users hacking and manipulate cookies, don’t worry. HMAC protection will check cookies’ validity based on a server-side key.