Sessions or Cookies?

[schumanna]

Hi everyone,
I know that when a session_start(); is called that will stay unless the session_destroy(); or the $_SESSION['name'] = FALSE; is called.

So if the user does not logout and come back later then the server will remember the user and will be still loged in again. But what about if the user disconnects from the
Internet and connects again and then goes to the website again. Will the website still remember him then after his IP address has chagned? If not how would I do
such a thing or would the normal Cookies be best so that he will always be remembered?

And what experance do you have with such matters and advice possible in developing a Sessions based system?

Thanks everyone!!!

schumanna

[Mordecai]

Sessions will end when the browser is closed. If session.use_cookies is on, then it will keep a cookie that expires when the user closes his browser. If it's off and the transsid is on, you will see ?SESSIONNAME=biglongsessionid at the end of the URL.

Either way, it won't be there when the user goes back. If it is, you've probably done something to make it do that, and you should know that the session will most likely be gone the next time they visit.

I would keep user name in a cookie and some sort of identifiable code (not a password) which you can read and log them in manually.