logging on to sites

[epimeth]

just so that I'm clear....

if I want to create a site that has people logging on and off, user data should be kept in some sort of database.

sessions are keeping data used as long as the user is visiting the site

cookies are for saving data client side to make things easier for him in the future (doesn't have to log in again since its in his cookie)

now if I use cookies, is there any reason to use sessions?

[planetsim]

Well you can but i wouldnt really suggest if you were id only use it to make sure only that person can login. And if the session hasnt expired or whatever they cant use that Cookie...

Id only use that if it were to be very secure, I.E. Admin for site

[tha_mink]

now if I use cookies, is there any reason to use sessions?

Yes. Lots of folks out there don't have cookies enabled on their browsers.

Plus, since session data is stored server side they are a little more secure than cookies. (and since people use the same password for everything they do online....)