How can you destroy a session in PHP?
A). session_destroy()
B). destroy_session()
C). end_session()
D). remove_session()
How can you handle user authentication in PHP using a database?
A). Query the database to validate user credentials
B). Use session variables to track user sessions
C). Store passwords in plaintext
D). Validate user credentials in URL parameters
What is the purpose of the session_write_close() function in PHP?
A). Writes session data and closes the session file
B). Opens a new session file for writing
C). Ends the current session and deletes session data
D). Retrieves the session data from the session file
What is the role of hashing in user authentication?
A). To securely store passwords
B). To encrypt session data
C). To generate random session IDs
D). To validate IP addresses
What does the $_SESSION superglobal array store in PHP?
A). Session data
B). User credentials
C). Database queries
D). HTML markup
What is the primary benefit of salting passwords before hashing?
A). To prevent rainbow table attacks
B). To increase server performance
C). To encrypt session data
D). To generate random session IDs
How can you implement remember me functionality in PHP?
A). By using persistent cookies with long expiration times
B). By storing passwords in plaintext
C). By disabling session management
D). By using URL parameters for authentication
What does the session_regenerate_id() function do in PHP?
A). Regenerates the session ID to prevent session fixation
B). Registers a new session ID with the server
C). Retrieves the session ID from the server
D). Ends the current session and deletes session data
How can you securely manage session data in PHP?
A). Store sensitive session data server-side
B). Store session data in plaintext on the client
C). Share session data in URL parameters
D). Store session data in unencrypted cookies
Which of the following is a security best practice for session management?
A). Use HTTPS to encrypt session data during transmission
B). Store session data in plaintext on the server
C). Set session cookies to expire after every request
D). Share session IDs in URL parameters