best time to set cookie on login?

[Anon]

When is the best time to set the cookie for login? Currently I have two pages for a login. One with the form, the other checks against database. Do I/Should I add another page to the mix for setting the cookie for a total of three? What is the standard practice? I don't see really see anyother way because the cookie has to be listed first on the page? right?

Thanks.

[theslinky]

In the page that checks the login, set the cookie right at the point where you have verified the person's credentials.

example:

<?php

... some code...

if($username == this) && ($password == that) {
// set cookie
SetCookie("name", "value", time()+3600);
... some more code ...
}

If you do the above, make SURE there is no contents (or even a single linebreak) before the beginning <?php tag, because otherwise PHP will complain that output has started before headers can go out.

You can do the three page method, but that's just an additional page and a little more work :-)

-sridhar

[Anon]

Thanks.. I will try you way!

-bill