Beefy Boxes and Bandwidth Generously Provided by pair Networks
httptech Syntactic Confectionery Delight  Answer: Cookie based
authentication: Is it secure?  ( #29937=categorized
answer: print w/ replies, xml ) Need Help??  Q&A > CGI
programming > Cookie based authentication: Is it secure?
contributed by chromatic  The only thing successfully retrieving
a cookie should imply, from a security standpoint, is that, at
one time, someone using that particular browser (session, if
you're using session cookies) was successfully authenticated.
Period.  If I logged in to your site from a public terminal and
left the browser open, anyone else could potentially use my
cookie.  For some applications, this is enough security. For
others, you might save a timestamp of the user's last access and
require reauthentication if X minutes/hours/days have passed
since the last transaction.  In general, if you don't store too
much information in a cookie and if you realize the implications
of what I've said above, this is a decent m