Get session using javascript

Question

The cookies can get by javascript if we use document.javascript.

I want to know : get session($_SESSION["session_var_name"]) by javascript () ?????

Good reply !! I have a question : Can any hacker get a session value using session id ?? — David coder
– David coder, Commented Aug 18, 2011 at 23:00
What specific entity do you need to get from the $_SESSION variable to the browser? — hookenz
– hookenz, Commented Aug 18, 2011 at 23:01
@David no, the value is stored on the server. A hacker could steal your session id and identify as you on a website — Teneff
– Teneff, Commented Aug 18, 2011 at 23:02

Phil · Accepted Answer · 2011-08-18 22:56:04Z

6

You can't. The data stored in the PHP $_SESSION super global is server-side only.

The cookies can get by javascript if we use document.javascript.

answered Aug 18, 2011 at 22:56

Phil

166k25 gold badges265 silver badges269 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Teneff · Accepted Answer · 2011-08-18 23:07:20Z

2

If you need any value from the $_SESSION array, you must pass it.

example:

<script type="text/javascript">
    var session_var_name = "<?=$_SESSION['var_name']?>";
</script>

you could also do it like this, BUT is really BAD practice:

<script type="text/javascript">
    // try this only at home :)
    var session = <?= json_encode($_SESSION) ?>;
</script>

answered Aug 18, 2011 at 23:07

Teneff

32.3k13 gold badges76 silver badges107 bronze badges