RE: [PHP] Sessions or Cookies?
| From: | Daevid Vincent | Date: | Sat, 18 Jan 2003 01:32:26 +0000 |
| Subject: | RE: [PHP] Sessions or Cookies? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-132068@lists.php.net to get a copy of this message | ||
Agreed. Sessions are much more secure and convienient to use too. Since
it's not reliant on the client to have cookies enabled, that's another
benefit. Plus it's MUCH harder for a client to spoof/alter a session
variable if you use the $_SESSION['myvar']
> -----Original Message-----
> From: Chris Shiflett [mailto:shiflett@php.net]
> Sent: Friday, January 17, 2003 9:29 AM
> To: Cesar Aracena; php-general@lists.php.net
> Subject: Re: [PHP] Sessions or Cookies?
>
>
> --- Cesar Aracena <icaam@icaam.com.ar> wrote:
> > Should I use the no-so-secure old cookies method
> > or should I start a new session every time a client
> > drops in and handle each cart by session name or ID?
>
> My advice is to only use cookies to identify a Web client.
> Any data you want to associate with that Web client (user
> data, for example) should be stored on the server -
> database, session store, etc.
>