Re: Session Security Question

"Xizor" <nope@nope.com> schrieb:

> To me, checking against the database each time the page is loaded seems
> unfriendly to the CPU. It seems that it would make more sense to set a third
> session variable the first time the user logs in to true and then check to
> see if that variable is true. I'm new to sessions, and to me, I can't quite
> tell if this is safe.

It's safe. Please make sure that you use a variable like
$_SESSION["login_ok"] instead of relying on activated register_globals
and accessing the data in $login_ok.

Matthias