Which of the following does NOT help to protect against session hijacking and fixation attacks?

Question

Options

• AUse SSL and set the $secure cookie parameter to true.
• BSet the session.use_only_cookies php.ini parameter to 1 .
• CSet the session.cookie_lifetime php.ini parameter to 0 .
• DProtect against XSS vulnerabilities in the application.
• ERotate the session ID on successful login and logout using session_regenerate_id()

• A
  6% (2)
• B
  3% (1)
• C
  78% (28)
• D
  11% (4)
• E
  3% (1)

No community discussion yet for this question.