phpsecurityencryptionsessionsuhosin

php session encryption


I'd like to have sessions data encrypted like they are in suhosin, is there any library out there providing that?


Solution

  • You could easily use mcrypt or a custom AES encryption to encrypt session data. The best bet would to create a session wrapper class that encrypts variables when you set them.

    For key management, you could create a unique key and store it in a cookie, so that only the user can decrypt their own session data.