php - identifying alternative to session for keeping user logged in? -


hey guys hoping me out

im doing practice project in php (making forum), , trying decide on mechanism keep user logged in. ive created user class, through user authenticated (on sign in) , future user account related operations through class (i.e user related info retrieval, when user makes post/comment, etc)

to keep user logged in, easiest path seemed to use sessions , store user object in session (not cookies since security risk), after doing research found out sessions can put huge load on system, specially if large amounts of data saved in them.

after trying figure out solution came 2 alternatives:

1: put user id in session, , through user id remake user object each time. again, seems bad implementation since database have re-queried each time.

2: save user id in session (once user has logged in ofcourse), , save whole object in cookie, , each time before using cookie, authenticate cookie matching user id in session user id in cookie. im not quite sure how cookies work, since critical user info may stored in user object (hence cookie), there kind of security risk here? can cookies stolen?

or there alternative better? whether different way use sessions or cookies, or use method different session , cookies?

i go for:

1: put user id in session, , through user id remake user object  each time. again, seems bad implementation since database  have re-queried each time.

and turn on mysql query cache make frequent queries faster. dont recommend $_session if data huge (but how big data actually?)


Comments

Post a Comment

Popular posts from this blog

java - Play! framework 2.0: How to display multiple image? -

i need display gallery of photos. here template: @(photos: list[photo]) @title = { <bold>gallery</bold> } @main(title,"photo"){ <ul class="thumbnails"> @for(photo <- photos) { <li class="span3"> <a href="#" class="thumbnail"> <img src="@photo.path" alt=""> </a> </li> } </ul> } and here controller method: public static result getphotos() { return ok(views.html.photo.gallery.render(photo.get())); } and here photo bean : @entity public class photo extends model { @id public long id; @required public string label; public string path; public photo(string path, string label) { this.path = path; this.label = label; } private static finder<long, photo> find = new finder<long, photo>( long.class, photo.class); public static list<phot...
Read more

gmail - Is there any documentation for read-only access to the Google Contacts API? -

i want read-only access user's google contacts. there stackoverflow member wanted this, , received following answer : yes, there is, use https://www.googleapis.com/auth/contacts.readonly scope , "view contacts". this exchange reference read-only access google contacts can find using google. simply using access token obtained attempt read usual google contacts api (i.e. https://www.google.com/m8/feeds ) fails insufficient permissions. similarly, using google contacts api on new target fails 404 errors (for example https://www.googleapis.com/auth/contacts.readonly/default/full ). is there documentation anywhere on how use api, or permissible way access google contacts api full read-write access?
Read more

php - Controller/JToolBar not working in Joomla 2.5 -

relevant code: jtoolbarhelper::custom('savecategories', 'save', '', 'save', false, false); ... <input type="hidden" name="controller" value="easyblogcontroller"> according can dig docs , own previous questions, should call savecategories() function in easyblogcontroller . i've tried setting value easyblog , easyblog.php (file name) current easyblogcontroller (class name). clicking on save button refreshes page. not redirect, echo or var_dump test code put in savecategories() function. var_dump ing jrequest::getvar('controller') , 'task' return correct values. creating controller object , using $controller->execute('task'); works. the values going depend on location of controller trying call, , have couple options here. typically there controller in base folder of component (likely components/com_easyblog) in file called controller.php , class name inside ...
Read more