feha
Posts: 712
|
| Posted: 01/19/2010, 4:31 AM |
|
I was wondering about :
CCCheckAutoLoginCookies()
OK, there is a key and encryption/decryption system.
I think that this is not a good practice to "handle" over username and password even on this "encrypted" way as the encryption algo is not very strong ...
As there are easy ways "sniffig" a cookie with JS ...
I have deveoped my own solution (a user fingerprint system) if time allows will present it at tips & tricks ...
Also developed own session handler for use with MySQL (or any db ...) PHP.
CU
_________________
Regards
feha
www.vision.to
feedpixel.com |
