The administrative control panel for a site I am building needs a login script. The active users are stored in a mysql table, but once a user is authenticated, should I store the token as a session or a cookie? Which (if either) is more secure?
Share
Sessions, definitely. They’re stored on the server. Cookies are stored on the client side and can be easily edited by the user.