Re: Re: input on sessions vs cookies
| From: | Tosca | Date: | Mon, 26 Feb 2007 00:45:00 +0000 |
| Subject: | Re: Re: input on sessions vs cookies | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-249420@lists.php.net to get a copy of this message | ||
Quote from Fahad Pervaiz <fahad.pervaiz@gmail.com>:
"To ensure best security use database as well. Store IP, Session ID,
username, login time. After every few minutes you can re authenticate the
user against these parameters."
I have a login system with sessions and a database where I store session ID,
username and what kind of user they are (like admin, moderator of regular
member). This I check every time a page is refreshed. Is this secure enough?