Understanding the Life of a Session: Nice post about web sessions vs. cookies

[mouser]

I found this a nice summary from a developer's perspective about the security of sessions and cookies..
It's focued on PHP but is relevant no matter what web language you use.

One of the most vast misconceptions in the PHP world is how sessions really do work. I'm fairly confident most of us know how to start sessions, terminate sessions, regenerate session IDs and easily pass data from 1 page to another. But do you really know how they work inside out?

http://www.talkphp.c...howthread.php?t=1077

[housetier]

A good read indeed, very easy to understand. Not knowing better, I assume the author's claims are correct and will try to talk my hoster into changing the php configuration.