Remember Me Setting

[eluser]devbro[/eluser]
I found that extending session is not a very wise idea thanks to the fact that cookies can be copied out. Here is how I got it done:

1. create a special cookies: remeber_me_username, remember_me_hash
2. create a database table that connects the cookies to proper account info.
3. on each page access do the following:
3.1 If user is logged in then ignore
3.2 if user is not logged in and cookies exists then validate cookie/database and call login procedure