Re: Login using just cookies, bad idea?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 08/07/10 17:53, Michael Calkins wrote:

I right now have a complete user login and registration system
however it uses cookies when you login to store information.  Is this
a bad thing?$_COOKIE vs $_SESSION for login systems

Encrypt the cookie, make sure you don't store the password in there, make sure it's salted, and validate the contents before using them.

http://stut.net/2008/07/26/sessionless-sessions-2/

-Stuart

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux