How to make use of cookies to login?

Don't store login id and password in the cookie. Instead, store session ID or something similar, which times out and becomes invalid soon, and also has such value that it cannot be controllably created by someone who wants to hack your site (so session ID is again a good choice).

On the server keep record of currently logged users in server-side session state. Make sure that server state is persisted because crash on the Web server may cause all current payments to be broken momentarily before end, which makes a lot of work for the support staff to correct then. Persistent server state ensures that Web all users will remain logged on as soon as Web server recovers from the crash and their payments can be processed to the end.

Zoran

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Zoran Horvat15y ago
Don't store login id and password in the cookie. Instead, store session ID or something similar, which times out and becomes invalid soon, and also has such value that it cannot be controllably created by someone who wants to hack your site (so session ID is again a good choice).

On the server keep record of currently logged users in server-side session state. Make sure that server state is persisted because crash on the Web server may cause all current payments to be broken momentarily before end, which makes a lot of work for the support staff to correct then. Persistent server state ensures that Web all users will remain logged on as soon as Web server recovers from the crash and their payments can be processed to the end.

Zoran
0