Reply to thread

Message

<blockquote data-quote="brsy" data-source="post: 310233" data-attributes="member: 2912">This is the exact design that was in the code demo, so how do the credits belong to you and Sheldos? Also, I don't see how this code works:[PHP]if($_SESSION['id'] &amp;&amp; !isset($_COOKIE['Remember']) &amp;&amp; !$_SESSION['rememberMe']){&nbsp; &nbsp; // If you are logged in, but you don't have the Remember cookie (browser restart)&nbsp; &nbsp; // and you have not checked the rememberMe checkbox:&nbsp; &nbsp; $_SESSION = array();&nbsp; &nbsp; session_destroy();&nbsp; &nbsp; &nbsp; // Destroy the session}[/PHP]Maybe I'm missing something but here is what I'm reading:<ul>
<li data-xf-list-type="ul">if ID is set, but rememberme isn't set --&gt; logout user.</li>
</ul>So, if the user chooses to never check the remember me box, it will logout the user upon a simple page reload. I'm pretty sure that is a horrible idea, if I am reading that correctly. Perhaps take the feature from another source, like:<a href="http://stackoverflow.com/questions/1354999/keep-me-logged-in-the-best-approach" target="_blank">http://stackoverflow.com/questions/1354999/keep-me-logged-in-the-best-approach</a><a href="http://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication/477578#477578" target="_blank">http://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication/477578#477578</a></blockquote>

[QUOTE="brsy, post: 310233, member: 2912"] This is the exact design that was in the code demo, so how do the credits belong to you and Sheldos? Also, I don't see how this code works: [PHP]if($_SESSION['id'] && !isset($_COOKIE['Remember']) && !$_SESSION['rememberMe']) { // If you are logged in, but you don't have the Remember cookie (browser restart) // and you have not checked the rememberMe checkbox: $_SESSION = array(); session_destroy(); // Destroy the session }[/PHP] Maybe I'm missing something but here is what I'm reading: [LIST] [*]if ID is set, but rememberme isn't set --> logout user. [/LIST] So, if the user chooses to never check the remember me box, it will logout the user upon a simple page reload. I'm pretty sure that is a horrible idea, if I am reading that correctly. Perhaps take the feature from another source, like: [url]http://stackoverflow.com/questions/1354999/keep-me-logged-in-the-best-approach[/url] [url]http://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication/477578#477578[/url] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members