RiptideTempora

Logout Shredder

Aug 13th, 2012
138
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 0.76 KB | None | 0 0
  1. <?
  2. // Logout shredder. If any sort of sensitive information is stored in session variables, use this to shred them upon logout.
  3. session_start();
  4. foreach($_SESSION as $i => $v) {  
  5.   // Shred everything. Leave absolutely no trace
  6.   if(!is_array($v)) {
  7.     $l = strlen($v);
  8.     unset($v);
  9.     $_SESSION[$i] = str_repeat(chr(246), $l);
  10.     $_SESSION[$i] = str_repeat(chr(0), $l);
  11.     $_SESSION[$i] = str_repeat(chr(255), $l);
  12.     $_SESSION[$i] = openssl_random_pseudo_bytes($l);
  13.     $_SESSION[$i] = str_repeat(chr(0), $l);
  14.     $_SESSION[$i] = str_repeat(chr(255), $l);
  15.     $_SESSION[$i] = openssl_random_pseudo_bytes($l);
  16.     $_SESSION[$i] = str_repeat(chr(0), $l);
  17.   }
  18.   unset($_SESSION[$i]);
  19. }
  20. session_regenerate_id(true);
  21. header("Location: /");
  22. exit;
  23. ?>
Advertisement
Add Comment
Please, Sign In to add comment