PHP script: Regenerate session ID for security

Last update on December 20 2024 10:20:55 (UTC/GMT +8 hours)

Write a PHP script to regenerate the session ID to prevent session fixation attacks.

Sample Solution:

PHP Code :

<?php
// Set the session save path
session_save_path('i:/custom/');

session_start();

// Regenerate the session ID
session_regenerate_id(true);

echo "Session ID has been regenerated.";

?>

Sample Output:

Session ID has been regenerated.

Explanation:

In the above exercise -

We start the session using session_start() to initialize the session.
Call session_regenerate_id(true) to regenerate the session ID. The parameter true indicates that the old session data should be kept while generating a new session ID.
Finally, we display a message indicating that the session ID has been regenerated.

Flowchart:

PHP Code Editor:

Contribute your code and comments through Disqus.

Previous: Limit maximum concurrent sessions to 3.
Next: PHP script: Display last session access time.