The way I have applied it, is it processes the login on my custom login page (all works fine etc etc), then it selects the user code for the user that passed authentication, and drops that code in a cookie. That code is then used to match to their database records on each page request. I am now logged in on the forums, and my main site which is good :)
But is this correct? The user code isn't changing because I've written my own login page, is this something I need to amend? What would you recommend? I've done it quite simply, might I have overlooked anything?
Thanks for any advice. One thing I should mention is that all pages will be using SSL when they are logged in so cookie hijacking will be harder.
Topic Options
Post Options
Thanks(0)
