0 views collected around this technical thread.
This article explains why multiple independent login systems hurt user experience and security, reviews traditional session mechanisms and their limitations in clustered environments, and then presents two session‑sharing strategies and a complete CAS‑based SSO solution with Java code examples.
This article explains how to correctly use PHP's session_start function, demonstrates basic session handling, shows how to control session lifetime with session_set_cookie_params, and describes how to destroy a session using session_destroy, providing practical tips for effective backend session management.
This article explains how to use PHP's session_start function to initiate sessions, manage session data with $_SESSION, control session lifetime via session_set_cookie_params, and properly destroy sessions with session_destroy, providing clear code examples for each step.
This article explains PHP's session management mechanisms, basic session operations, security considerations, and various user authentication methods—including session‑based login, token‑based authentication, and password hashing—providing developers with practical guidance to build secure web applications.
This article explains how to correctly use PHP's session_start function, demonstrates basic usage, shows how to control session lifetime with session_set_cookie_params, and illustrates session destruction with session_destroy, providing code examples for each step.
This article explains the fundamentals of PHP session management, covering how sessions store and transmit user data across pages, essential functions like session_start() and $_SESSION, practical code examples, and common pitfalls to avoid for secure and efficient web applications.
This article presents a comprehensive guide to designing and implementing fine‑grained permission control for microservices using Apache Shiro, covering the architectural design, shared session handling with Redis, custom cache and session managers, realm implementation, and practical testing across user and video services.
This article outlines essential Laravel security practices, including built‑in authentication, CSRF protection, input validation, HTTPS enforcement, secure session handling, regular dependency updates, and rate limiting, providing developers with concrete steps to protect web applications from common attacks.
This article examines the Cloud Connect Network gateway architecture, identifies performance bottlenecks in the V1 packet‑forwarding process, proposes a session‑based optimization that reduces query complexity from O(n) to O(1), and validates the improvement with latency tests showing a drop from 500 ms to about 1 ms.
This article explains three backend strategies—session‑cookie, token, and JWT—to ensure an account can only be active on one device at a time, detailing the workflow, data structures, and Redis integration needed to implement forced logout across multiple endpoints.
This tutorial explains why the legacy PHP function session_register() was deprecated and guides developers through modern, secure session management techniques such as using the $_SESSION superglobal, regenerating session IDs, enforcing expiration, setting secure cookie flags, CSRF tokens, and encrypting session data.
This article explains the limitations of traditional Cookie+Session authentication, explores distributed session sharing techniques such as replication, sticky sessions, and centralized storage, and demonstrates why using ThreadLocal can simplify user state management in a web application like the Echo project.
This article explains traditional session mechanisms, challenges in clustered environments, and presents solutions such as session replication and centralized storage, then details the design and implementation of a CAS-based Single Sign-On system in Java, including code for user forms, controllers, filters, and configuration.
This article explains how to use PHP's session_start function to initiate sessions, manage session data with $_SESSION, control session lifetime via session_set_cookie_params, and properly destroy sessions using session_destroy, providing clear code examples for each step.
This article explains how to correctly use PHP's session_start function to initiate sessions, manage session data with $_SESSION, control session lifetime via session_set_cookie_params, and properly destroy sessions using session_destroy, providing clear code examples for each step.
This article explains how to correctly use PHP's session_start function, demonstrates setting session variables, controlling session lifetime with session_set_cookie_params, and properly destroying sessions with session_destroy, providing clear code examples for each step.
This article explains the purpose and security risks of PHP session IDs, demonstrates how to use the session_regenerate_id function with example code to generate a new session ID, and outlines best practices such as starting the session, using HTTPS, and avoiding excessive regeneration to maintain performance.
This article introduces Redis fundamentals and demonstrates how to integrate Redis into PHP web applications for caching, session management, database caching, and queue operations, providing code examples that illustrate connecting to Redis, setting and retrieving data, and configuring expiration to boost performance and stability.
This article explains the essential components of user authentication architecture, covering its importance, core principles, registration, login, session management, popular protocols like OAuth, OpenID Connect, SAML, JWT, and critical security considerations for robust protection.
This article explains why using JSON Web Tokens (JWT) for session management is a flawed approach, detailing the misconceptions about JWT benefits, the security and operational drawbacks of stateless tokens, and finally outlining the scenarios where JWTs are appropriately applied.