Re: session or cookie

From: Date: Fri, 10 Nov 2000 21:00:34 +0000
Subject: Re: session or cookie
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-24720@lists.php.net to get a copy of this message
> Cookies are slightly faster in that they do not hit the server as hard, > but at the same time if you use large cookies they add to the amount of > data that has to be downloaded, which slows things down a little. Not entirely true - I made a shopping cart (as many others have) that stored tons of info in a table. This was keyed by ONE cookie that was 32 characters long (aka a sessionID). So I don't *really* buy that. > The cool thing about session variables is that there is a unique > identifier to more data on the server, so the user cannot actually > change the data by editing their cookie file. At the very most they > could only change the identifier, which wouldn't really matter. The chances of someone altering the cookie and then stealing someone elses data is quite slim - if you seed your random sessionID well enough you shoudn't have any problems. > Even with the speed issues, use session vars, they're more flexible and > they add one more layer of security. :) I don't see how this is true ... I personally think session vars are for people who didn't quite understand the setcookie() function :) (this is meant as a joke - don't flame) AFAICT cookies and session id's are pretty much six one way; half a dozen the other (or 5cm one way 50mm the other for metric people) --Joe > > Steve Nelson > http://www.SecretAgents.com > Tools for Fusebox Developers > > Mark Lo wrote: > > > > Hi, > > > > I would like to know what is the difference between session and > > cookies. > > > > Thank you > > > > Mark lo > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net ================================================================================ = Joe Stump joestump98@yahoo.com http://www.miester.org = ================================================================================ "Real programmers don't comment their code. It was hard to write, it should be hard to understand."

« previous php.general (#24720) next »