What is the best approach of creating a login System?
- by Starx
I am always wondering that the login systems I have created is vulnerable to attacks or not.
As many other programmers I also use sessions to hold a specific token token to know the login status. Cookies to hold the username or even sometime saved status.
What I am wondering is, Is this the right way? Is there any approach better that this?