How can I check if a file is on my server?

Question

PHP

Good afternoon! There is such an idea, after the user's authorization on the site, save his name and photo in cookies, after the session expires, when he is redirected to authorization, do not display the entire form for him, but offer to enter only a password, such as:
Hello John! {PHOTO}, so the point is that saving the data is not a problem) the problem is that in the photo cookie I want to keep the path to the picture and the question arises if the cookie is suddenly replaced ..
my cookie: /files/photo/user/1 /photo.jpg
villain cookie: zlo.ru/zloi-kod.js
and it turns out that the wrong code will load, how to avoid this situation?

Answer 1

Keep a random uid in the cookie, and everything else in the database, tied to this value.