Since the day I knew PHP and started to code some online applications for my college projects, I always set cookies when user has correctly given his/her login information and then check whether cookies have been set in the beginning of each protected page.
Is that what you guys (as web developers for "real" websites) always do? or there is a better approach to this?