30f
Well, after a programming hiatus, I am back to working on Session Management for GroupOrg. I have decided to take advantage of ADOdb's session handler and store sessions in the database. The advantage to going this route is two-fold. First, the session is not stored in files, which, on a improperly configured server, are readable by the world. By using the database, the session data is password protected. Secondly, ADOdb encrypts the information in the database, so even if someone were to gain access to the database, the information there would be useless.
While I have not seen any empirical evidence, I do imagine that I am taking a performace hit by using the database instead of the file system. However, I believe that the added security outweighs the performance cost.
669
Previous Topic
