|
snaayk
Senior Member
USA
1061 Posts |
 Posted - 15 May 2002 : 10:00:14
|
I know this forum does but I am having a hard time finding the code. I have a site that has a login writing the user and pass to the cookie. Now, any half intelligent person will realize that the cookie could be edited and that any username or access level or any other info could be changed to suit thier malicious needs. What would be the best way to verify that the cookie info is correct?
I think the forum has a chkuser function, but I'm not sure.
What I have to just make a check on every page to verify that the user and pass match the db and if not erase the cookie?
That sounds like a good process but I want to be sure that its the best way.
|
|
Topic Locked
