How to identify a user on the site?

G

g_oo_gle2015-10-05 16:54:46

PHP

g_oo_gle, 2015-10-05 16:54:46

How to identify the user on the site, so that he would continue to use it even after restarting the browser
I know that there are cookies that can be created after authorization through a pair of login:password
But isn't it too banal?
Will they substitute another value in cookies?
Or, as an option, make md5 encryption for example a login and create cookies in this way
. Or are there any safer options?

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

J

javanub, 2015-10-05
@g_oo_gle

Check your soap and password when logging in. If the request to the database returns a false, then there is no such user or the data is incorrect. Well, then cookies and sessions.

N

Nazar Mokrinsky, 2015-10-05
@nazarpc

Yes, it's trite, all sites do this.
They will set it up for sure, you have to check what is there.
md5 is never encrypted, it's a one-way hash, and not the best.
The safer option is to use ready-made tools created by experienced developers. Judging by the formulation of the question, I would not recommend that you implement such things yourself.

S

SuperDoker, 2015-10-05
@SuperDoker

You take a phrase, let's say "login + password + salt", hash it with md5 and put it in cookies. Be sure to check when you enter.