Re: storing passwords in $_SESSION
| From: | Dan Brow | Date: | Thu, 13 Oct 2005 02:39:56 +0000 |
| Subject: | Re: storing passwords in $_SESSION | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-224008@lists.php.net to get a copy of this message | ||
On Tue, 2005-10-11 at 00:25 +0200, Oliver Grätz wrote:
> Dan Brow schrieb:
> > Thanks, figured that would be the case. Can't for life of me think why I
> > wanted to do that, must have had a brain infarction. I want to have an
> > expired session prompt so people can log back in with out having to
> > start at the login page. Would having the users login saved in $_SESSION
> > be alright? prompt them for their password and compare it with the
> > password in the DB be fine? I want to reduce the amount of typing
> > someone has to do when a session expires.
>
> Why don't you leave the decision if they want to type to the user?
> My browser keeps track of what I entered into every login form I ever
> visited...
This app is going to be in a Doctors office I don't want people storing
passwords on systems that have patient records.
Dan.