Secure remember me function?

Secure remember me function?

El Forum
Guest

11-03-2008, 12:16 PM

[eluser]dcunited08[/eluser]
Well, you could include in that cookie a copy of the requesting IP address. The security implication is that it could be faked as well. If you are running a forum or something similar, I do not see much of a problem. If the application is a bank site, I would not add this functionality. Are you including the username and then the hash or only the hash?

Messages In This Thread

Secure remember me function? - by El Forum - 11-02-2008, 05:59 AM

Secure remember me function? - by El Forum - 11-03-2008, 12:16 PM

Secure remember me function? - by El Forum - 11-03-2008, 12:23 PM

Secure remember me function? - by El Forum - 11-03-2008, 12:59 PM

Secure remember me function? - by El Forum - 11-03-2008, 01:04 PM

Secure remember me function? - by El Forum - 11-03-2008, 01:22 PM

Secure remember me function? - by El Forum - 11-03-2008, 01:28 PM

Secure remember me function? - by El Forum - 01-10-2009, 07:10 PM