Re: Login using just cookies, bad idea?
| From: | Stuart Dallas | Date: | Mon, 12 Jul 2010 22:29:25 +0000 |
| Subject: | Re: Login using just cookies, bad idea? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-306854@lists.php.net to get a copy of this message | ||
On 08/07/10 17:53, Michael Calkins wrote:
I right now have a complete user login and registration system however it uses cookies when you login to store information. Is this a bad thing?$_COOKIE vs $_SESSION for login systemsEncrypt the cookie, make sure you don't store the password in there, make sure it's salted, and validate the contents before using them. http://stut.net/2008/07/26/sessionless-sessions-2/ -Stuart