Welcome Guest, Not a member yet? Register   Sign In
Question about Session class and using the database.
#1

[eluser]Zorancho[/eluser]
Hi there!
I am using the Session class and i could see from the code that it is checking if the session id stored in the user browser as cookie is same as the one in the database and if they are not the session will be destroyed.
There are same keys in the database and in the browser.
After loging a user, i am adding for example: logged_in => true and user_id => 234 in the session in the browser. What if i add two more same fields in the ci_session table for logged_in and user_id and then do additional checking when redirecting the user to sites that require logged in status? Will it make my application more secure or it is just a waste of time?


Messages In This Thread
Question about Session class and using the database. - by El Forum - 06-18-2009, 07:15 PM
Question about Session class and using the database. - by El Forum - 06-18-2009, 07:26 PM
Question about Session class and using the database. - by El Forum - 06-18-2009, 07:49 PM
Question about Session class and using the database. - by El Forum - 06-18-2009, 10:35 PM
Question about Session class and using the database. - by El Forum - 06-18-2009, 11:27 PM
Question about Session class and using the database. - by El Forum - 06-18-2009, 11:30 PM
Question about Session class and using the database. - by El Forum - 06-19-2009, 03:31 AM



Theme © iAndrew 2016 - Forum software by © MyBB