What are common pitfalls when trying to store form data in sessions in PHP?

One common pitfall when storing form data in sessions in PHP is not properly sanitizing and validating the data before storing it. This can lead to security vulnerabilities and data integrity issues. To solve this, always sanitize and validate form data before storing it in sessions. 

// Sanitize and validate form data before storing in session
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = filter_var($_POST['name'], FILTER_SANITIZE_STRING);
    $email = filter_var($_POST['email'], FILTER_VALIDATE_EMAIL);

    if ($name && $email) {
        session_start();
        $_SESSION['name'] = $name;
        $_SESSION['email'] = $email;
        header("Location: success.php");
        exit;
    } else {
        echo "Invalid form data";
    }
}

Keywords

session_start $_SESSION serialization unserialize data loss

Related Questions