Session? Cookie? or PHP_AUTH?

[tuf-web.co.uk]

hey,

i was wondering, which is better to use

SESSION
COOKIES
or PHP_AUTH_USER/PHP_AUTH_PW

i understand that sessions are better than cookies because they are stored on the hosts computer and not the client, therefore not being easy to get hold of

but is PHP_AUTH better?

for a simple admin/member control panel what would you suggest?

[interactive]

I think cookies are a bit unreliable IMHO. Sessions if used properly are perfect. As for PHP_AUTH, I don't really like using it because of the form, just a personal prefrence.

[stolzyboy]

sessions all the way...and IIRC, I helped you with sessions before so you should pretty familiar with them

[tuf-web.co.uk]

yeh very familiar thanks to you :) good work again ;)

is there any floor about using PHP_AUTH?

[stolzyboy]

I just don't personally like using it, for the sake or the ugly dialog boxes and stuff, it is just so much nicer and cleaner using sessions.

[LordShryku]

Gotta agree here. I'm not a cookie kinda guy, and PHP_AUTH is just oogly. You have complete control over the sessions...

[stolzyboy]

Originally posted by LordShryku
Gotta agree here. I'm not a cookie kinda guy, and PHP_AUTH is just oogly. You have complete control over the sessions...

And why would you even possible think of disagreeing with me!?

:D

[LordShryku]

Ok, I changed my mind. Use cookies. Just because. :p

[mogster]

I'm a cookie man.
Especially around christmas :D

No, but I prefer cookies as authentication, and even prefer to set them by javascript.

Did you know that Sweden has outlawed the use of cookies? Now, if you'll like to serve ads by cookies, the client has to confirm for acceptance of each cookie.
By hand-delivery, I mean, ordinary prompts don't work.
So what happens is that they call up this guy in the Nobel-committee, or was it the swedish chef?), and he arranges the whole thing.

I'm only kidding. Almost.

knutm :-)