Once the user logs in, assign the user a random number that will go in the URL with the GET method. Create a small temp file that contains the username, random number, and user IP. When someone loads a page, check for user IP and random number, and compare with the file information. Overwrite the temp file with a new random number (and maybe new IP) every time the user logs in. (You could add a sign-out function that will delete the temp file.)
How secure will that method be?
In reply to Is this a secure way to handle login? by tipthepizzaguy
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |