SESSION:Find current active users in my app???

[eluser]Lorren[/eluser]
I've been using this system for quite some time, and it's worked out very well for me in the past.

1) Token: Create a random token.. something like this:

Code:

md5(rand().time()) // or use sha1 if you prefer

2) Auth System: The 'token' should be enough, though it would probably be best to associate it with the user's id or another unique string. The idea is to provide a way for the session to find the correct db row, but you'll also want to provide some safeguard to session hijacking. Though, CIs cookie encryption may be enough.