Dan Hardiker wrote: > How you can tell a cookie to be stored in RAM rather than on the HDD, Im > not sure ... but that might mean I need to brush up.
do not set a lifetime and it won't be stored on disk and live in browser ram until browser is terminated has been so ever since netscape came up with cookies > Now this is where the code dev needs an IQ above 3. *Use IP and Browser > String authentication* > > eg: Load up the session ID given, check the ip and browser string > (possibly even referrer) and if they dont match, squeel. IPs might change due tu proxy farms or DHCP leases expiring and getting renewed with a different IP -- Hartmut Holzgraefe [EMAIL PROTECTED] http://www.six.de/ +49-711-99091-77 -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php