Transfering sessions across domains

[eluser]The Wizard[/eluser]
heheh thank you

yes, thats true indeed.

so we make a special table, link it with the users id (via secret key).
on the table, we store all information about the user, (browser type, IP etc.)
and compare it with the user, which try's to login via the secret key.

At least, this would bring somehow a little bit security

i remember a prominent example where gmail was a subject to those session
hijacking where you could gain access to a gmail account of choice.


damn. security is hard.