Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I was reading about cookie and session’s relativity, and a question prompted into my mind as
How to retain the session id if the cookie containing the session_id is deleted?
So guide me in this case..
Thanks In Advance…
You could store ip->session relation in a table and reference it (stored sessions database), but I would advise against that for multiple reasons (including if you log in at an internet cafe and another user on the same network accesses the page, they now “own” the other user’s session).
The other options is to apply SESSID in the URL and every link contain that key, but that forces the URL to carry the ID everywhere.
Short answer, have them re-authenticate and create a new session; it’s safer that way.