Hi! For higher security it's generally better to use Sessions BECAUSE Cookies generally stores files on the client hd for a longer time, and it's therefore easier to get the password (if the password itself is not encrypted). My tip is to use sessions if it works. Uses cookies in other hand (It depends of the application what you need) Best regards /Gustav Wiberg -----Original Message----- From: Matthew Gonzales [mailto:matt323@xxxxxxx] Sent: Tuesday, October 09, 2007 8:23 PM To: PHP-Windows Group Subject: Authentication Question! Hello, Could some one offer their opinion one which is better to use when creating a password protected area, a $Cookie or a $Session. I have found alot of info on both and can't really make up my mind. I am running PHP and MySQL on IIS 6.0. Matt G -- Matthew Gonzales IT Professional Specialist Enterprise Information Technology Services University of Georgia Email: matt323@xxxxxxx <mailto:matt323@xxxxxxx> Phone: (706)542-9538 -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.488 / Virus Database: 269.14.5/1058 - Release Date: 2007-10-08 16:54 -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php