[Resolved] query string log in

[jasonmills58]

Is it possible to log people into a site and maintain their session through a query string? I'm trying to avoid cookies and remain fairly secure.

thanks!

[LordShryku]

Sure, you could. It's the logging out thing that sucks. Most people, even when presented with a logout button, don't use it. They go to a diferent site or just close their browser. You'd need to record/update their login time everytime they hit a page, and run a cron job to logout people after x amount of time idle

[jasonmills58]

Hey Shryku, thanks for the info.

Isn't the not-logging-out problem an issue with cookies, too? Is this cron thing going to be more hassle than its worth? Do you recommend a particular log in method?

thanks for the input!

[LordShryku]

Cookies can be set with expiration. Personally, I use sessions, which combine cookies and server files. You may want to look into that. The cron thing wouldn't really be the hassle. The hassle would come with having to do an update query to your database every time a page is viewed. Under heavy loads, this may bog down the server a bit.

[jasonmills58]

Oof, I hadn't thought of that. I'll look into sessions.

Thanks again!