[PHP] How to manage login ???

Hi I have a question . At some website which have webmail serivce , they won't use SSL for login . Then how can they protect clinet's information and email ?? they use sessions when login in ?? use sessions is secure ?? Is there another security method in PHP ? -- PHP General Mailing

Re: [PHP] How to manage login ???

Well, you're getting the reason for the security methods mixed up. First, SSL only means that no one can know what data is being sent between you're computer and the destination server. If a site doesn't use SSL than someone can, technically, 'sniff' your username and password and thus gain