Changes for page Security

Last modified by Vincent Massol on 2021/07/21

<
From version < 1.6 >
edited by Vincent Massol
on 2007/03/16
To version < 1.7 >
edited by Vincent Massol
on 2007/05/20
>
Change comment: There is no comment for this version

Summary

Details

XWiki.XWikiComments[0]
Comment
... ... @@ -1,0 +1,1 @@
1 +You shouldn't store the username and password in the cookie itself. Keep that information on the server side, hidden behind a randomly generated number. Ie. use it as the primary key in a databasetable. The random number is then stored in the users cookie. It's much safer and it does not require secrets.
Date
... ... @@ -1,0 +1,1 @@
1 +2007-05-20 13:10:10.50
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Jersin

Get Connected