About security in PHP-MYSQL

Question

Please apologize my english.

In my website I use this kind of lines to define if the current user is an admin or a normal user:

<? if($_SESSION["nivel"] == 'administrator'){ ?>

I wanna know if this $_SESSION variable could be modified from client side by an user and cause me some security problems.

score 4 · Accepted Answer · edited May 23 '17 at 12:09

4

$_SESSION is a superglobal which is only modified on the server.

Therefore the client will never be able to change it.

edited May 23 '17 at 12:09

Community

answered Mar 31 '17 at 21:16

Derek

1 Answers1