保护PHP $ _SESSION数据？

Question

I'm working on a project that requires sessions instead of cookies and I was wondering what a good way to secure them are? With cookies I would just do something like this:

$x = serialize(array('username', sha1('pwd')));
setcookie('cookieName', $x, time()+60);
...
$myCookie = unserialize($_COOKIE['cookieName']));
echo $myCookie[0];

But I'm not quite sure how to go about it with sessions.

Answer 1

There's no need to serialize data in the session. It gets serialized for you.

Also I don't see what this has to do with security. The SHA1 hashing of the password in the cookie? You shouldn't send a password client-side at all! At least in the session that variable would only be stored server side (Sessions are stored in a server-side file by default)