Articles

WordPress and cookies

Important: The workaround provided in this post is not reliable enough, there is now a more secure way to fix this problem. The new fix is available as a convenient plugin.

Since the release of WordPress 2.0, a pesky bug has been annoying several bloggers.…

Airtight sessions

I recently read an article which warns about the fact that cookie based authentication can be exploited using JavaScript. I am not going into detail about the problem itself, but I’ll try to give a brief explanation using an example:
Alice is a user browsing the web.…