Databases
StackOverflow2013
Postsdbo
POWhat is a session cookie?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POWhat is a session cookie?
    primarykey
    data
    text
    <p>I was reading <a href="http://jaspan.com/improved_persistent_login_cookie_best_practice" rel="nofollow">this</a> article and I was wondering, what exactly is a <code>standard session management cookie</code> (SSMC)?</p> <p>It also recommends that the SSMC should be a <code>session cookie</code> and therefore expire when the browser is closed.</p> <p>Because it's an 'improved' article, I tried to look for any definition in the original article (<a href="http://fishbowl.pastiche.org/2004/01/19/persistent_login_cookie_best_practice/" rel="nofollow">here</a>). According to it, a <em>"SSMC handles the credentials for the life of the session, so the newly assigned cookie will not be checked until the next session (at which point it, too, will be invalidated after use)."</em></p> <p>What I didn't understand is how long will the user be logged in if the session expires when the browser closes and the session's lifetime credentials are deleted? and how this should be used? There is nothing in the article about the 'normal' cookies (that contain the login information) being session cookies and therefore they should have an expiration date.</p> <p>I'm really confused so I hope someone can clear it up for me. Any alternatives as secure as this one are also welcomed. Thanks!</p> <p><strong>Background:</strong></p> <p>I'm writing a remember me function using cookies. Apparently there are 2 cookies; The first one is the <code>SSMC</code> (standard session management cookie) and the second one is a login cookie which consists of:</p> <ul> <li>A username</li> <li>A <code>unique token</code> that's being regenerated every time the user logs in to the site</li> <li>A <code>series id</code> which is a unique random number for a specific <code>username</code> that <strong>never</strong> changes. These are also stored in a table in the database.</li> </ul>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. USLeigh
    1. USAsaf
    plurals
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. CORelated reading: http://stackoverflow.com/questions/3128985/php-loginsystem-remember-me
      singulars
      1. POWhat is a session cookie?
      1. USLeigh
    2. COTo answer the question in the title: a session cookie is either a) a cookie that stores information about the user's session, like the session id; or b) a cookie which is only valid for the current "browsing session", i.e. a cookie with an expiration value of `0`, which will be expired when the browser window is closed. The term "session cookie" unfortunately applies to both of these, but often a "session cookie" incorporates both aspects. I have not read the linked article in full to answer your concerns in more details (TL;DR).
      singulars
      1. POWhat is a session cookie?
      1. USdeceze
    3. COI think both. But what if the cookie expires, what happens then? A new one should be created? The user is counted as logged off? Basically what I'm asking is, what's the session management cookie's role in the whole system?
      singulars
      1. POWhat is a session cookie?
      1. USAsaf
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload