Posted by Jon on 11/18/89 11:43

Is there any advantage to be gained from using the calls to a cookie then?
I thought that setting a $_SESSION variable also saved a cookie anyways...

"fiziwig" <fiziwig@yahoo.com> wrote in message
news:1143560669.145997.260430@t31g2000cwb.googlegroups.com...
> As I understand it, having the information in the cookie on the user's
> system makes it possible for someone to create a counterfeit cookie and
> spoof the system. Using the $_SESSION array keeps it on the server side
> and is more secure.
>
> --gary
>

[Back to original message]