| 1 | What are the httponly and secure flags on a cookie, and why are they important for protecting session cookies specifically? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Intermediate |
| 2 | What are the security and architectural considerations of using stateless, token based authentication such as JWT instead of traditional server side sessions for an API? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Advanced |
| 3 | What is a session in PHP, and how does it let a web application remember information about a user across multiple separate page requests? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Beginner |
| 4 | What is a cookie, and how does it differ from a session in terms of where the actual data is stored? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Beginner |
| 5 | How does PHP's session garbage collection work, and what settings control how long session data is kept before it is considered expired and eligible for cleanup? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Intermediate |
| 6 | What is session fixation, and how does regenerating the session identifier after a successful login help prevent this attack? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Intermediate |
| 7 | How can you store session data in a shared storage system like Redis or a database instead of the default local file storage, and why is this often necessary for applications running on multiple servers? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Advanced |
| 8 | What is cross site scripting, commonly called XSS, and how does properly escaping output help prevent it? PHP › Security | PHP | Security | Beginner |
| 9 | How does cookie-based authentication work in ASP.NET Core, and when is it preferred over token-based authentication? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 10 | How does two-factor authentication (2FA) work with ASP.NET Core Identity, and what does the sign-in flow look like? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 11 | What is the difference between IAuthenticationService's SignInAsync/SignOutAsync methods and simply checking if a user 'is authenticated'? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 12 | How does authentication typically work for a RESTful API, and what is the difference between session based authentication and token based authentication using something like a JSON Web Token? PHP › RESTful API Development with PHP | PHP | RESTful API Development with PHP | Intermediate |
| 13 | Why should passwords always be hashed before storing them in a database, and how does PHP's password_hash function make this straightforward and secure? PHP › Security | PHP | Security | Intermediate |
| 14 | What is cross site request forgery, commonly called CSRF, and how do CSRF tokens help protect forms from this type of attack? PHP › Security | PHP | Security | Intermediate |
| 15 | How would you implement sign-out that properly invalidates both a cookie session and any associated server-side state? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 16 | How does Cross-Site Request Forgery protection work for form submissions, and why is including a CSRF token in every form considered essential? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Advanced |
| 17 | How should a complex, multi step form, such as a checkout process, handle validation and state management across multiple pages while maintaining data integrity and security? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Advanced |