StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>If you don't want to re-direct to the login page when the session has expired, <strong>the cookie</strong> that's been created when the user logged-in <em>(checking the "remember me" thing)</em> <strong>must contain enough informations to re-create a session</strong>.</p> <p>And re-creating a session means re-logging the user in.</p> <p>Which means the cookie must contain enough data to identify the user.</p> <p><br> Of course, <strong>you cannot store the login + password in the cookie</strong>, at least in plain clear text, as cookies go through the network with each HTTP request ; wouldn't be quite safe.</p> <p>But you have to find a way to store... enough data ; like the login, and possibly some kind of hash that can be used to determine if the user if really who the login in the cookie says.</p> <p>Here are a couple of <strong>questions + answers that might be interesting</strong>, about that :</p> <ul> <li><a href="https://stackoverflow.com/questions/1858448/what-should-i-store-in-cookies-to-implement-remember-me-during-user-login">What should I store in cookies to implement “Remember me” during user login</a></li> <li><a href="https://stackoverflow.com/questions/2371374/remember-me-authentication-feature-does-it-always-mean-unsecure-website">‘Remember-me’ authentication feature, does it always mean ‘Unsecure’ Website?</a></li> <li><a href="https://stackoverflow.com/questions/689508/is-this-a-reasonable-way-to-implement-remember-me-functionality">Is this a reasonable way to implement ‘remember me’ functionality.</a></li> <li><a href="https://stackoverflow.com/questions/1929340/how-to-create-a-secure-php-login-system-allowing-for-keep-me-logged-in-functio">how to create a secure php login system, allowing for “keep me logged in” functionality?</a></li> </ul>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload