PHP Web Application Security Vulnerabilities

Sending the hash

• For cookies or hidden form fields

• Hash: data plus secret word

• Add hash to a cookie or form

Checking the hash

• When you get the data back, re-hash

• Compare received and calculated hashes