Which is better to use to authorize users cookie or session?

Question

PHP

When creating authorization on the site, the question arose whether it is better to use sessions or cookies

Answer 1

Sessions are most often held on cookies: with each request, the browser passes a cookie with the session ID, and php pulls out of its storage - files, Redis, database, as you wish - session data for this id.
Those. the difference is where to store the session data itself: on the server or on the client.
Everything that comes from the client can be faked. Therefore it is better to use sessions.

Answer 2

Usually these are related things. Otherwise, how do you determine which session a given user belongs to? Unless, of course, php-session-trans-id is used.