Does laravel default session name so imortant?

Hello,

when a user login Laravel sets a cookie name as the following:

env('APP_NAME') . "_session";

But I have seen some people make it complicated and generate like big string for session name.

Does this really matter?

Snapey

5 years ago

Best Answer

Level 122

I've never seen anything that says its important, but it could be used to determine that this is a Laravel application and then use that knowledge to try some other vulnerability.

Changing the cookie name avoids unnecessary information leakage.

1 like

uniqueginun

5 years ago

Level 9

the answer I was looking for, thank you.

Please or to participate in this conversation.