Make a session last for a month

[perrohunter]

hi !

I made this website that uses sessions and works great, however my client don't like loging in all the time, and remove the login is not an option.

When they login I start the session and stuff.

how can I make the session last for 1 month, and work even if they close the browser and then come back ?

I already tryed
ini_set("session.cookie_lifetime","2592000");
ini_set("session.gc_maxlifetime","2592000");

cheers

[alanzhao]

use setcookie, session will be destried when browser closes.

[perrohunter]

hmm , I dont want to go and modify the whole 124 files i have :/

Do you have anysuggestion on how to safely store data on a cookie ?

I think i might have to look for cookies before loging the guy , if he has the cookie ill autolog him =P

what do u think ?

[alanzhao]

store and encrypt data like username, password in cookie

before login, check to see if cookie exists, if so compare cookie value with database value.

I recommend do the comparison on every page load especially on user authentication.