Re: [PHP] Re: input on sessions vs cookies

2007-02-27 Thread Richard Lynch
Re-authenticate and make them login again when they do something particularly dangerous/serious/big-time. Nothing you've listed matches the above, except maybe changing their current password to a new one. I suppose you could do it just to change any profile setting, but some goofball out there w

Re: [PHP] Re: input on sessions vs cookies

2007-02-25 Thread Tosca
It's a website where you can reply to news, blogs and other messages and with a forum. On 2/26/07, Richard Lynch <[EMAIL PROTECTED]> wrote: On Sun, February 25, 2007 6:45 pm, Tosca wrote: > Quote from Fahad Pervaiz <[EMAIL PROTECTED]>: > "To ensure best security use database as well. Store IP,

Re: [PHP] Re: input on sessions vs cookies

2007-02-25 Thread Richard Lynch
On Sun, February 25, 2007 6:45 pm, Tosca wrote: > Quote from Fahad Pervaiz <[EMAIL PROTECTED]>: > "To ensure best security use database as well. Store IP, Session ID, > username, login time. After every few minutes you can re > authenticate the > user against these parameters." > > I have a log

Re: [PHP] Re: input on sessions vs cookies

2007-02-25 Thread Tosca
Quote from Fahad Pervaiz <[EMAIL PROTECTED]>: "To ensure best security use database as well. Store IP, Session ID, username, login time. After every few minutes you can re authenticate the user against these parameters." I have a login system with sessions and a database where I store session I

[PHP] Re: input on sessions vs cookies

2007-02-24 Thread Fahad Pervaiz
#ORIGINAL## i would like your input on session vs cookies regarding login data like usernames/passwords ect... END ORIGINAL - Main difference is that cookies are stored on the client machine and session is maintained on server machine. - Cookies can store information for lo