PHP Beginner Help

[djr33]

Alright. Makes sense.

So... using sessions as an alternative to cookies doesn't really make sense, sounds like. that's what I was hoping for.

Other ideas?

[Twey]

So... using sessions as an alternative to cookies doesn't really make sense, sounds like.

Yes, it does

[djr33]

Well... sounds like it could work, but it's kinda roundabout... still uses cookies or does some odd thing with the links and such. I mean.... that would work, I guess... just seems less-than-equal as an alternative to cookies.

Guess those users will just have to deal with it though ^_^ Hehe....


Or... wait... yes as in it DOES make sense, or as in Yes, I'm right. Now I'm confused.

Other ideas if you're saying not to use them?

[Twey]

Other ideas if you're saying not to use them?

I'm saying you should use them

Well... sounds like it could work, but it's kinda roundabout... still uses cookies or does some odd thing with the links and such. I mean.... that would work, I guess... just seems less-than-equal as an alternative to cookies.

That's exactly why it's superior to storing all the sensitive data in a plaintext file on the user's hard drive.

Guess those users will just have to deal with it though ^_^ Hehe....

Hm? Sessions are more reliable than cookies, since users without cookies can still use them.

[djr33]

well.... it'll be messy if all the urls have that line added to them. Just meant the users will have to deal with it if they don't have cookies enabled.

You say its more secure than storing in a plaintext file, then won't it just be stored in a cookie anyway if they are enabled...?

[Twey]

well.... it'll be messy if all the urls have that line added to them.

Not really. Most major sites use sessions, and quite a few of them seem to elect not to use cookies to store the SID, though I don't know why.

You say its more secure than storing in a plaintext file, then won't it just be stored in a cookie anyway if they are enabled...?

No. On the server, a session identifier (SID) will be stored along with all the data stored in that session. The only thing stored in a cookie, if cookies are enabled, or on the URI, if not, is the session identifier.