Re: Cookies Vs Sessions...?
| From: | Eugene Lee | Date: | Fri, 03 Oct 2003 22:42:23 +0000 |
| Subject: | Re: Cookies Vs Sessions...? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-165002@lists.php.net to get a copy of this message | ||
On Fri, Oct 03, 2003 at 08:57:17AM -0700, Chris Shiflett wrote:
:
: --- Eugene Lee <list-php-1@fsck.net> wrote:
: > >
: > > On each protected page, put an IF ($logged == "yes") { //show page etc }
: > > else {//show login form etc }
: >
: > You should use $_COOKIE['logged'] instead. :-)
:
: While we're talking about "should", you should also never trust what
: the client sends, including cookies. :-)
But if you take this to its natural conclusion, then you should never
trust the client. :-)