FW: Sessions get mixed up ?

2004-11-16 Thread Gerald Richter
> > > > > Create a new similar module with your desired alogrithem > > and specify it as > > > Generatior in the Embperl config > > > > > > > Hi! > > > > How would you change the Embperl config accordingly. > > > > > EMBPERL_SESSION_CLASSES "MySQL Semaphore Storable myMD5" > > > See al

Re: Sessions get mixed up ?

2004-11-16 Thread Stefan Cars
Ed Grimm wrote: On Mon, 15 Nov 2004, Pierre Etchemaite wrote: Le lun 15 nov 2004 18:24:06 CET, Ed Grimm <[EMAIL PROTECTED]> a écrit : Apache::Session generates the id by doing a md5 hash on a random number (time () . {} . Rand() . $$) , maybe there are situation where it generates the same id (als

Re: Sessions get mixed up ?

2004-11-16 Thread Stefan Cars
Gerald Richter wrote: How hard would it be to change the code to use a SHA or SSHA hash instead? (Admittedly, I'm picking a more cryptographically secure hash at psuedo-random; there may be one that's more appropriate.) Note that I realize they take longer to generate, but that time only happ