I have read about session, and for now I found my session is just for personalization for users, here are the code.
session_start()
$_SESSION['username'] = $username;
$_SESSION['premisson'] = $permisson;
$_SESSION['language'] = $language;
I got 2 questions:
1. Should I genorate a session for every guest if there might need some temponary storage of some data?
2. To make a site secure, should I only allow session to genorate in the login page and no where else?