Pro PHP Security: From Application Security Principles to the Implementation of XSS Defenses, Second Edition

Test for Protection Against Session Abuse

In previous chapters, we have proposed testing your scripts for possible vulnerabilities.

When it comes to session abuse, however, the issue is too global in nature to be susceptible to patchwork testing. Avoiding vulnerabilities is a matter of general programming practice rather than of amassing a collection of individual techniques. In this case, then, we do not present any kind of test, but simply urge you to follow the good programming practices we have discussed earlier.