Login script question!

[Anon]

Hey all,

I have just come across to php from asp - and one thing is not clear to me. With regards to admin sections of web sites (that need a username and password to enter) - with asp I always used session("") to identify that the user had logged in. Although I have found that sessions can be used in php - nobody ever uses them for login scripts - they always use cookies. I was just wondering why this was, and whether a session can be a secure way of "marking" a user that has logged in.

regards
Wang

[[deleted]]

I guess you just haven't come across an example.

People use sessions to mark users as logged on all over the place.
(I do it myself)
Cookies are used to remember which session belongs to the client.