m3rajk — Sun, 13 Jun 2004 02:09:59 +0000

Busy wrote: It's not that I don't want to use a cookie, just want to use a cookie in a secure way.

in that case the quick answer is to talk to someone who has actually written a thesis in secure cookies.
at least i think he said it was a masters tehesis. i knwo he did write a paper on it.

go to the php develeoper's network.

look got nielsen (sp?).

sorry i cant be of more help.
had a major motherboard issue

Suzanne — Sat, 12 Jun 2004 22:53:36 +0000

Wouldn't that be their own problem? Not to minimize it, but if they choose to be "logged in" automatically, it's on their head, not yours if they do that in a public internet cafe?

Busy — Sat, 12 Jun 2004 22:42:33 +0000

It's not that I don't want to use a cookie, just want to use a cookie in a secure way.

example; if I just put the users id and encrypted password into the cookie, who ever uses the cookie would always get a true result and be logged in to said account. Because NZ is mostly diapup uses their ip's changes all the time so comparing user id to ip would more often than not be false.

Suzanne — Sat, 12 Jun 2004 19:27:33 +0000

Is there a reason you can't use a cookie? That's really the most common route.