Password in Session Variables?

[eluser]richthegeek[/eluser]
there are easier ways - store a per-session hash in the session/cookie and in the database related to that users row.

For example, create a hash like "sha1( time() . rand() )" and store that |40| hex in both then query for that.