Remember me function using database to store details

Question

i have a 'working' login form which validates and uses bound variables.

My site now is almost ready (content wise) to be put online so im now coming back to the login process as i want that 100% before releasing to public.

I want to have a remember me function, but cant find any help / tutorials on going about it via a database. I read a post here while back that said the best way was to store hashed values in DB and check it against a cookie.

I cant find this post anymore and googling returns old code or simple cookies for the function. I can find various posts talking about the area, but no code i can view andtry ti implement.

I want to learn the 'proper' way to do this so just need pointing in the right direction.

As well as this, i will create a delay timer on incorrect attempts and also use some hidden fields. But the remember me comes first.

Thanks, Craig.

Answer 1

Using cookies and checking the value in the database would be the best approach. There are many tutorials of how you can make such a function. this post seems to cover what you need to know.

As mentioned there, you need to remember that a remember-me cookie can't be 100 % secure, so when the user logs in with the cookie and is about to edit some very sensitive information, a re-login should be required.