How secure is this approach

[eluser]Joseph Wensley[/eluser]
I went through this on here once, I was doing the same thing you are but realized that if a user is deleted or something they could still be logged in because there session might still exist.

I think the best thing to do is just check the DB on each page load to make sure they are still logged in.


my orignal thread - http://ellislab.com/forums/viewthread/144607/