Wow, thanks.  I may look in to using cookies after all..

Andrew Musselman
[EMAIL PROTECTED]

>>> [EMAIL PROTECTED] 8/17/2005 4:37:28 PM >>>
cookies can be secure, and i would actually debate that cookies are  
more secure.


1. your userid/password don't get passed for every request
2. you can 'logout' a session
3. the cookie's expiry time can be controlled.

the trick with cookies is sending the encrypted session ID with some  
kind of time in the salting function.
you can make them pretty secure.

Reply via email to