Currently im using cookies to check to see if a user is logged in, simply checking to see if the cookie exists, which i'm told isn't very secure since a user can create the cookie themselves.
How would i make it more secure so that people can't just create a cookie and be logged into my site
