Which one is most suitable for user login system with a 'keep me signed in' button? Sessions or cookies?

Answer 1

Session is destroyed once you close website, so you'd have to set cookie that will hold eg.: "loggedIn" and everytime user enters the site, it'll check if it's set to "1" and log him in, otherwise show log in form.

Answer 2

Sadly it is, that is why I do not make such an button. Too much work for not so useful feature

Answer 3

And then doesn't it unsafe to save sensitive data such as user id in a cookie? That is the problem I met

Answer 4

agree with you