http vs sessions

[wondernate]

Noob Here...

 

HTTP or Sessions.    For Authentication which is better to use? 

 

Thanks all,

WN8

[emirbugra]

no man. for secure application use secure socket layer. but for using general user authentication use password input and post it. if true, use $_SESSION else don't take the user.

 

for more knowledge go to the google.com

[corbin]

wondernate, your question doesn't make much sense.

 

 

 

Sessions are a way to give HTTP, a stateless protocol, a sort of psuedo-state.

 

 

(This assumes you don't have SSL.  If you're using HTTPS, either method should be fine.  As an end user I prefer PHP authentication since it seems cleaner and less obtrusive.)

 

Or do you mean HTTP authentication?  Because then it depends on many, many things.  Typically I would go with no, although technically in a way HTTP authentication could potentially be more secure if the password were encrypted since the password using PHP authentication would not be encrypted (unless some ghetto JS came into play).

[keldorn]

unless some ghetto JS came into play

 

Yep, Double ROT-13 is very secure. 

 

</sarcasm>