Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Changing session data...
I'm just making a wee thing here for school, and though security isnt a major issue i thought it was worth having a quick think about it. All the login and stuff relies on sessions (couldnt be bothered with cookies), primarily the ID in the session. How difficult is it to change this within the session? Should i add in extra protection?
This discussion has been closed.