Form authentication depends on the mod_session modules, and these modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private ...

I have a part of an internal website that I want to protect with a password. For my purposes I am just trying to keep the riff raff out rather than worry about MITM attacks; thus the functionality of ...

If you run a publicly accessible Web server for your own use (and let's face it, if you're reading Linux Journal, there's a very good chance you do), how do you go about limiting the risk of someone ...