What is the primary benefit of salting passwords before hashing?
A). To prevent rainbow table attacks
B). To increase server performance
C). To encrypt session data
D). To generate random session IDs
What is the role of hashing in user authentication?
A). To securely store passwords
B). To encrypt session data
C). To generate random session IDs
D). To validate IP addresses
Which PHP function is used to set session cookie attributes?
A). session_set_cookie_params()
B). set_session_cookie_attributes()
C). configure_session_cookie()
D). modify_session_cookie()
How can you securely manage session data in PHP?
A). Store sensitive session data server-side
B). Store session data in plaintext on the client
C). Share session data in URL parameters
D). Store session data in unencrypted cookies
What is the purpose of using prepared statements in user authentication?
A). To prevent SQL injection attacks
B). To optimize database queries
C). To increase server performance
D). To store session data securely
How can you implement remember me functionality in PHP?
A). By using persistent cookies with long expiration times
B). By storing passwords in plaintext
C). By disabling session management
D). By using URL parameters for authentication
What is the recommended approach for handling session data in PHP forms?
A). Use form validation and CSRF tokens
B). Store session data in hidden form fields
C). Use plaintext passwords for form authentication
D). Share session data in URL parameters
What is the purpose of the session_write_close() function in PHP?
A). Writes session data and closes the session file
B). Opens a new session file for writing
C). Ends the current session and deletes session data
D). Retrieves the session data from the session file
Which of the following PHP functions is used to destroy a session?
A). session_destroy()
B). destroy_session()
C). end_session()
D). remove_session()
How can you prevent session fixation attacks in PHP?
A). Regenerate session IDs after successful authentication
B). Use weak session IDs
C). Store session IDs in plaintext
D). Disable session management entirely