Posted by Mike on 07/03/06 15:07
l3vi501@gmail.com wrote:
> Personally that sounds like a little over kill to be storing the
> session in a DB, then referencing the session off the user session ID,
> and then checking if they are still logged in.
I'm not storing the session id to the db, I'm storing the users unique
id (I have an auto-increment unique id) FROM the db to a session and a
"loggedin = true" session.
Why check the password on every page when we know the user is logged in
by checking the "loggedin" session. If its true then they must be
logged in.
Then if I need to get data about the logged in user I just check logged
in = true and if so seach the db for the users unique id which I stored
in a session when they logged in.
Mike
Navigation:
[Reply to this message]
|