-2

I want to add remember me option in my login page. Now is it possible without using session or cookie and tell me which one should I use here cookie or session...

Now if I am signed out and shut down my PC and then again start it as I enter the URL of my login page either username and password must be filled in both boxes or automatically I get login.

How I can do this?

I am confused in session and cookie. I know that cookie is sent to our computer when I visit any site. Is it like this? Some doubts are here:

  1. Is password and username are automatically thrown into your computer when you use any login page which have not used cookie concept in his page.
  2. I have two pages one is login page and second one is password_matching page. Now if I create a cookie which store my user name and password,next time what type benefit I can get from this cookie and how I will call a cookie there.
  3. I use session for checking whether I am logged in or not, can I use cookie in the same way to check whether I am logged in or not.
  4. Is there any special location where I should use cookies on my HTML page. Like I use session in very first line for checking does session exist or not.

Also tell me where session should be used and where cookie should be used.

halfer
  • 19,824
  • 17
  • 99
  • 186
Deepak Narwal
  • 313
  • 7
  • 23
  • 6
    'u' is a character, not the word "you". – Luca Matteis Jan 31 '10 at 23:36
  • @Luca: Heh, I agree, but about a billion people think otherwise :) – Pekka Jan 31 '10 at 23:40
  • 4
    I'm glad you took a while to write out your question. I'm pissed off that you can't capitalize correctly, Don't use real words (see @Luca's comment), and each question you provided can't be answered without further speculation about the problem. – Tyler Carter Jan 31 '10 at 23:41
  • 3
    To Person who voted to close this as "Spam", Just because you don't like it doesn't make it spam. It may be too localized, or not really asking anything, but there are categories for that. Spam is for... well... spam. – SoapBox Jan 31 '10 at 23:43
  • 1
    It would be nice to have this question in English. – TRiG Feb 01 '10 at 12:33
  • Possible duplicate of [What are sessions? How do they work?](https://stackoverflow.com/questions/3804209/what-are-sessions-how-do-they-work) – TRiG Aug 02 '19 at 11:07

3 Answers3

0

I cannot answer everything now but some thoughts:

Mostly it is a browser feature that your username and password are already filled in the form. E.g. Firefox always asks if you want to store the password and username for the site you just logged into. So this is totally independent from any cookie or session using.

The automatic login on the other hand has something to do with cookies. Mostly in such a cookie a token is stored that gets transferred to the website which checks in some database whether the token is valid or not.

The only thing you could implement such a feature without cookies is to put such a token in a URL, the user has to bookmark. But I would not use such a construction for automatic login.

Felix Kling
  • 795,719
  • 175
  • 1,089
  • 1,143
0

Sessions depend on cookies (usually).

Cookies have a lifespan. If no lifespan is set, a cookie will die when the user closes the browser. This is called a "session cookie". Sessions use session cookies (but not all session cookies are sessions).

By default (you can override this), PHP sessions depend on a cookie called PHPSESSID.

You can use URL parameters, instead of cookies, for sessions, but don't.

TRiG
  • 10,148
  • 7
  • 57
  • 107
0

Session ends when browser is closed, cookie can have a long lifespan. cookie has a 4kb memory limit and I'm pretty sure session does not have a limit.

You would use a cookie for "remember me" feature. and set the cookie to expire 2 day later or 2 year later

Ross
  • 511
  • 2
  • 9
  • 18