title: Securing Sessions using unique information
body: <p>To Avoid Session Hijacking after a user has logged In , <strong>what information can i rely</strong> on during login process to validate that indeed the legitimate user. So that someone who intercepts the session to relay will be invalidated</p>
  
  <p>Are their Ip address and Browser Information good enough for it ?</p>