From: Anders Borch <spam@...>
Date: 2003-05-30T04:02:48+09:00
Subject: Re: [Q]: CGI::Session

gabriele renzi wrote:
> il Thu, 29 May 2003 08:14:35 +0900, Tom Danielsen <tom@mnemonic.no> ha
> scritto::
> 
> 
>>A couple of questions about CGI::Session :
>>
>>- why is only the first part of the MD5 sum used in
>> the session_id ?

someone (a russian security expert) told me that you can safely use a 
substring of an MD5 sum in stead of the entire MD5 sum since every bit 
in the MD5 sum will change value if the source data changes.

>>
>>- why does CGI::Session::FileStore write the session
>> variables as text, instead of using Marshal ?
>>

good question.

>>
>>Tom
> 
> 
> I add my own question:
> - when the $TMP/file gets deleted? 
> 

AFAIK it doesn't on my server I have this crontab:

10 * * * * find /tmp -amin +30 -user apache -type f -exec rm -f {} \;

/Anders