Re: Cookies - good or bad???

Well, I have to have to it becuase my company is a credit report reseller. I can't image if someone can easily break in. :-) As long as I don't work for CIA or FBI then I'll be fine! "Kondwani Spike Mkandawire" <kondwani@cs.mun.ca> wrote in message news:20020718163112.74036.qmail@pb1.pair.com... > Awesome Scott... That's some wicked code... > "Scott Fletcher" <scott@abcoa.com> wrote in message > news:20020718160532.48734.qmail@pb1.pair.com... > > Instead of Cookies, I use Sessions which is run on hte server side. So, I > > use the > > > > --snip-- > > $salt = strtoupper(md5(uniqid(rand()))); > > session_id($salt); > > session_start(); > > header("Location: > > https://xxx.yyy.zzz/index.php?".SID."&init_login=TRUE"); > > --snip-- > > > > to create the identifer for an unique person. Then use the php script > that > > take care of the session management such as logging the user out when time > > is up as an example. Another script was used to prevent the direct access > > attempt. Another script was used to detect whether the server have the > > user's identifier in the server, if not exist then would force the web > > browser to the login page. > > > > As for the newbie, well, sometime they had to learn it from the pro. > > Although it would be nice if there is documentation somewhere. > > > > > > "Cord Schneider" <oo6jmt8en001@sneakemail.com> wrote in message > > news:20020718151831.8887.qmail@pb1.pair.com... > > > "Phpcoder" <internet@vsa.co.za> wrote in message > > > news:3D36C4EB.3060900@vsa.co.za... > > > > I'm really battling with this whole session thing. > > > > My first impressions are that cookies are OK, and really helps to make > > > > sessions workable and efficient, YET, from a developers point of view, > I > > > [..snip..] > > > > Does anyone out there have a view/practise when it comes to > > > > session/cookies? - basically I am still not convinced that using > > > > sessions/cookies is a good idea, but I would love to be educated as to > > > > why I should... > > > > > > A number of people have offered their opinion why cookies are a bad > idea. > > As > > > a developer new to PHP, if cookies are such a big a big no-no, how does > > one > > > do effective session management without storing anything client-side?? > > Bear > > > in mind that the browser is stateless and, the user can disconnect and > > > reconnect in between fetching pages from your site. > > > > > > Regards, > > > Cord > > > > > > > > > > > > > > >