How to save session in cookies?

Question

PHP

Now, when I authorize, a session is created that is equal to the user ID, then I display the user's data in his personal account through this id. But even during authorization, cookies are created that are also equal to the user id.
If there is a session when entering the site, then everything is OK, we continue to work on the site, if not, we check the cookies, if they exist, then we create a session equal to the cookies (there id).
Is it correct?

Answer 1

You put the bolt on security by making authorization by cookie which is equal to the user's id.
Let's say I go to your site, go to the browser settings and set your cookie, let's say id = 1, and so I went to your site as an administrator, or just under some other user. The question is only in the selection of id.
Therefore, if you want to make such an authorization, you need to have a login token that is not related to the user in any way.
The user entered a login/password, if everything is ok, create some kind of rubbish, like
token = md5(salt . rand() . id) // this part is your fantasy :)
save it both in the user's cookie and in the database.
When a user visits the site, you take this cookie and check against the value in the database for that user. Everything.

Answer 2

Not right.
Better not play with security if you don't understand how it works. Use the default sessionid and nothing else needs to be written in the cookie.
php.net/manual/en/session.examples.basic.php

Answer 3

I did the authorization like this:

<?php 
require '../libs/bd.php';
require '../libs/session.php';
$date = $_POST;
$errors = [];
if (isset($date['log_b'])) {
  if ($date['login'] == "") {
    $errors[] = 'Ошибка: Вы не ввели логин!';
  } else {
    $p_login = $date['login'];
    $ack = mysqli_query($connection, "SELECT * FROM `users` WHERE email = '$p_login'");
    $user = mysqli_fetch_assoc($ack);
  }
  if ($date['pass'] == "") {
    $errors[] = 'Ошибка: Вы не ввели пароль!';
  } else {
    $passh = password_verify($date['pass'], $user['password']);
  }

  if ($passh == false) {
    $errors[] = 'Ошибка: Вы ввели не верный логин или пароль!';
  }

  function generatePassword($length = 8){
  $chars = 'abdefhiknrstyzABDEFGHKNQRSTYZ23456789';
  $numChars = strlen($chars);
  $string = '';
  for ($i = 0; $i < $length; $i++) {
    $string .= substr($chars, rand(1, $numChars) - 1, 1);
  }
  return $string;
}

  if (empty($errors)) {
    $uuid = password_hash(generatePassword(8), PASSWORD_DEFAULT);
    setcookie("Auth", $uuid, time()+60*60*24*365*100 , "/");
    mysqli_query($connection, "UPDATE `users` SET `uuid`='$uuid'");
    $id = $user['id'];
    $_SESSION['Auth'] = $id;
    echo "Успешно";
  } else {
    echo array_shift($errors);
  }
}
?>