Home/ Questions/Q 8284989
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-08T11:18:41+00:00

I’m not concerned with browser compatibility. I want to know if I move my

  • 0

I’m not concerned with browser compatibility.

I want to know if I move my state from PHP Controlled ( Server-Side) sessions to the JavaScript Controlled ( Client – Side ) HTML 5 local storage will I gain or loose security.

I think that I would gain security because now instead of having the user identifier residing in a cookie, which is usually a file, or sql database that is easily accessible…it is not inside some sort of internal browser storage. + b.c. it is a newer technology I would hope that more security was designed into it.

Do I gain or loose security by moving from PHP Sessions to JavaScript Local Storage. ( This is for things like user id, page_id, etc, the current state that remains after a reload and longer if needed ).

I have a JavaScript solution I want to replace my PHP Sessions with. That is why I ask. I don’t care about browser compatibility.

Here is an informative site on Local Storage. But Security was not mentioned.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Both types of local storage (localStorage and Cookies) use some sort of identifier which is obviously stored on the client.

    Both use a hash mechanism to secure it from altering to another user.

    Local Storage is more secure then cookies ( see here ).

    And obviously you have to write the session protocols if you want to move your user identifier from cookies to localStorage.

    Both can be stolen to fake being another user. Though less likely with localStorage.

    And to make robust you need a fingerprinting technique that will help with above problem.

    • 0