Re: CAKE_SESSION_STRING - what it's behavior?

2007-08-11 Thread Geoff Ford
phpjoy, Thanks for the praise :) Geoff On 8/11/07, phpjoy <[EMAIL PROTECTED]> wrote: > > > Just making sure.. :-) > Thank you. > > By the way, I really enjoy your blog. It's a great piece of work. > > On Aug 10, 2:05 pm, "Geoff Ford" <[EMAIL PROTECTED]> wrote: > > Nope size is not an issue here

Re: CAKE_SESSION_STRING - what it's behavior?

2007-08-10 Thread phpjoy
Just making sure.. :-) Thank you. By the way, I really enjoy your blog. It's a great piece of work. On Aug 10, 2:05 pm, "Geoff Ford" <[EMAIL PROTECTED]> wrote: > Nope size is not an issue here :) > > Geoff > > On 8/10/07, phpjoy <[EMAIL PROTECTED]> wrote: > > > > > > > so it's size doesn't matte

Re: CAKE_SESSION_STRING - what it's behavior?

2007-08-10 Thread Geoff Ford
Nope size is not an issue here :) Geoff On 8/10/07, phpjoy <[EMAIL PROTECTED]> wrote: > > > so it's size doesn't matter.. means each install i can put a random 10 > letters number, sha256 it and wrap it up? > > > On Aug 10, 8:23 am, Geoff Ford <[EMAIL PROTECTED]> wrote: > > It is a random string

Re: CAKE_SESSION_STRING - what it's behavior?

2007-08-10 Thread phpjoy
so it's size doesn't matter.. means each install i can put a random 10 letters number, sha256 it and wrap it up? On Aug 10, 8:23 am, Geoff Ford <[EMAIL PROTECTED]> wrote: > It is a random string that should be (near enough to) unique for your > application. It is used to salt hashes, seed rnd()

Re: CAKE_SESSION_STRING - what it's behavior?

2007-08-09 Thread Geoff Ford
It is a random string that should be (near enough to) unique for your application. It is used to salt hashes, seed rnd() and the like to improve security. Geoff -- http://lemoncake.wordpress.com On Aug 10, 2:39 pm, phpjoy <[EMAIL PROTECTED]> wrote: > After messing around a bit with the Auth com

CAKE_SESSION_STRING - what it's behavior?

2007-08-09 Thread phpjoy
After messing around a bit with the Auth component, I got to "CAKE_SESSION_STRING" for security usages. I wonder which value it should hold. I just put in random chars? is it an md5 value? other type of hashed value? Should it have a number of chars? --~--~-~--~~~---