I'm programming some login scripts, and the issue of security came to mind. If I store a cookie with the username and password, that could easily be jacked. If I stored a cookie with a session ID and an IP bind or an encrypted pass with the ip address as the key, however, dialup users would have to re-login each time they go online, which would be a pain. Is there any way around this, any way to get cookie security and not make dial-up people have to log in each time?