http://www.google.com.ph/search?q=session+vs+persistent+cookies&start=0&ie=u
tf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official

 Session vs Persistent
Back to the Table of Contents

Simply put, a SESSION cookie resides in the browsers memory and not on the
hard drive. It can be used in conjunction with data stored in a login
database to regulate participation in a Web site's service. When the user
closes the browser or the user surfs to a new site the session cookie is
either dropped or written by the browser to the hard drive for later
reference. The cookie written to disk is called a PERSISTENT cookie, which
can be referenced by the browser on behalf of the current Website.

One good use of persistant cookies is for preventing duplicate user ids from
being used. Persistent cookies let Web sites tpo recognize someone who
visited a site say a month ago, and they do not need to regenerate a new
user id for the returning visitor.

Each time an established user logs into a restricted site, the Web server
and database compares the browser cookie against the database record. Each
connection attempt is logged, together with a variety of tidbits, such as
browser type, IP address, and operating system. If the browser cookie and
the cookie stored in the server database match, access is granted and the
cookie is replaced with a new unique identifier. This prevents others from
using your login name and password because their cookie (or absence of
cookie) will not match what's in the server database.

If cookies are not used to store session ids assigned by the site then other
methods for maintaining state include: 1. Passing the collected info between
pages thru the URL, like
http://thesite.com/login.html?ID=1234%Name=Bob+Smith%SSN=111-22-3333%Amount=
$1000

2. Passing the data between pages in hidden HTML fields, which are actually
passed in the HTTP header.

Both methods have limitations in length. And more importantly, they both
expose their data during transmission (unless used in a secured session
using something like Secure Sockets -- SSL). Whereas cookies containing only
session ids pass cryptic info over the internet, and the receiving Web site
uses that session id to look up the users data, thereby alleviating the need
for secured sessions over exposed connections.  


Ralph Lauren Quintano
Project Coordinator, http://www.marvinsweb.net
Web Developer, http://www.rllq.com

-----Original Message-----
From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf
Of Yogita
Sent: Sunday, January 29, 2006 10:50 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]; [EMAIL PROTECTED];
[email protected]
Subject: [php-list] Differance between Session cookies and persistent
cookies

Hello guys......
   
  Can anybody knows the differance between Session cookies and persistent
cookies.
   
  Thank you............

                
---------------------------------
 
 What are the most popular cars? Find out at Yahoo! Autos 

[Non-text portions of this message have been removed]



Community email addresses:
  Post message: [email protected]
  Subscribe:    [EMAIL PROTECTED]
  Unsubscribe:  [EMAIL PROTECTED]
  List owner:   [EMAIL PROTECTED]

Shortcut URL to this page:
  http://groups.yahoo.com/group/php-list
Yahoo! Groups Links



 








Community email addresses:
  Post message: [email protected]
  Subscribe:    [EMAIL PROTECTED]
  Unsubscribe:  [EMAIL PROTECTED]
  List owner:   [EMAIL PROTECTED]

Shortcut URL to this page:
  http://groups.yahoo.com/group/php-list 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/php-list/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Reply via email to