|
the webserver has a setting for php which decides to store sessions as cookies only, or as cookies first and get/post as fallback, or just get/post. GET is pretty insecure to have your information in.
Normal login steps are.
Have a form to enter login information
Send form via POST to a php script
Have the php script verify login information
Have the script start a session (search for session at php.net for functions) with your username or some other identifier
Whenever you need to use that information, access it through $_SESSION['variable']
|