是否有即用型会话劫持保护API？

Question

I have looked into many threads that discuss preventing Session hijacking & fixation but I feel that there are always details I'm missing out.

What I'm looking for is something with the same principle as what HTML Purifier does against XSS, but in this case against Session hijacking and fixation.

Is there an API or a PHP class made by anyone that covers everything that can be done to prevent Session Hijacking and Fixation?

Or is it better to do it on my own?

Thanks in advance. Regards

Answer 1

It is always better to make one yourself. It might be harder and in the end not do much, but frameworks and APIs are accessible from those guys who will make the high-jacking.

Try encrypting your sessions and working that way. Security requires drastic changes to the architecture of a platform and consequently of its database