2 ms·

PHP also uses cookie named PHPSESSID to store session ids. Use session.name to specify a different one.

• laumars 14y ago
  That has no impact on security. If an attacker can read your cookies then it didn't matter if you're sessions are called PHPSESSID or WETTROUT, they're still readable.
  • evan_ 14y ago
    It only matters if you're trying to disguise the fact that you're using PHP, as the article suggests.
    • laumars 14y ago
      Which again, doesn't add any additional security.