Posted by monomaniac21 on 02/16/07 09:01

hi

i have a php site which allows users to save a cookie on their
computer which stores their user id details and allows them to auto-
login.

i'm wondering whether this is safe, is it possible for a malicious
user to find that cookie and change its value and therefore auto-login
as someone else? and if so how can this be prevented?

thanks

marc

• Next in forum: Re: MOD Re-Write
• Prev in forum: Re: How to disable controle keys
• Thread view: is it safe to store a cookie user id as a login for my site

[Reply to this message]