Problem Statement
Which step can reduce the risk of session hijacking?
Explanation
Using HTTPS encrypts session data in transit, while regenerating session IDs after login prevents attackers from reusing old session tokens.
Code Solution
SolutionRead Only
session_regenerate_id(true);
Practice Sets
This question appears in the following practice sets:
