Use cookies to track and identify users_PHP tutorial
Let's take a look at what's saved in the browser. If you are using IE5, there is a cookie directory in the windows directory. There are many text files in it. The file names are similar to wudong@15seconds[1].txt. These are the cookies used by the browser to save values. . In previous versions of IE, the contents of cookies were viewable, but now the contents have been encoded. Before the browser gets a Web page, it will first check whether the domain name of the page exists in the cookie. If there is a match, the browser will first send the matching cookie to the server, and then accept and process the cookie sent by the server. page.
Let’s take an example of cookie application: when I connect to Amazon.com, the browser will send the contents of the cookies it previously set to Amazon before accepting the first page. Then Amazon.com checks the transmitted content to see if there is relevant information in the database. After matching, it creates a customized page for me and transmits it.
Assigning a value to cookies
Cookies must be assigned a value before the server sends any content to the client's browser. To do this, the cookie settings must be placed within the
setcookie("CookieID",$USERID);
?>
< ;HTML>
The setcookie function has a total of six parameters, separated by commas:
Name is a string, for example: "CookieID". Colons, commas and spaces are not allowed in between. This parameter is required, while all other parameters are optional. If only this parameter is given, the cookie will be deleted.
The value of the cookie is usually a string variable, such as $USERID. You can also assign a ?? to it to skip setting the value.
The time when the cookie expires. If omitted (or assigned a value of zero), the cookie will expire at the end of the session. This parameter can be an absolute time, represented by DD-Mon-YYHH:MM:SS, for example: "24-Nov-9908:26:00". What is more commonly used is to set a relative time. This is achieved through the time() function or the mktime function. For example, time()+3600 will cause the cookie to expire after one hour.
A path used to match cookies. When there are multiple cookie settings with the same name on a server, this parameter is used to avoid confusion. Using the "/" path has the same effect as omitting this parameter. It should be noted that Netscape's cookie definition puts the domain name in front of the path, while PHP does the opposite.
The domain name of the server is also used to match cookies. It should be noted that a dot (.) must be placed before the domain name of the server. For example: ".friendshipcenter.com". Because unless there are more than two points, this parameter cannot be accepted.
The security level of the cookie is an integer. 1 means that this cookie can only be sent over "secure" networks. 0 or omitted means any type of network is acceptable.
Cookies and Variables
When the PHP script extracts a cookie from the client's browser, it will automatically convert it into a variable. For example: a cookie named CookieID will become the variable $CookieID.
The content of Cookies is reported in the HTTP_COOKIE_VARS array. You can also access the specified cookie value through this array and the name of the cookie:
print$HTTP_COOKIE_VARS[CookieID];
Remember each user
Let’s look back at the submitform.php3 file above. Its function is to put the customer’s name Added to the database, now I want to add something to it. I want to assign a unique user ID to each user, and then put this ID in Cookies, so that every time a user visits my website, I can know who he is through the cookie and the user ID in it. .
MySQL can be set to automatically assign a number to each new record. This number starts from 1 and automatically increases by 1 each time thereafter. With one line of SQL statements, you can easily add such a field to the data table. I call it USERID:
ALTERTABLEdbname
ADDCOLUMN
USERIDINT(11) NOTNULL
PRIMARYKEYAUTO_INCREMENT;
We have made some special settings for this field. First, define its type as an 11-bit integer through "INT(11)"; then use the "NOTNULL" keyword to prevent the value of this field from being NULL; then use "PRIMARYKEY" to set it as an index field, so that it can be searched will be faster; finally, "AUTO_INCREMENT" defines it as an automatically incremented field.
Once the user’s name has been inserted into the database, it’s time to set a cookie on their browser.What is used at this time is the value of the USERID field we just talked about:
mysql_connect(localhost,username,password);
mysql_select_db(dbname);
mysql_query( "INSERTINTOtablename(first_name,last_name)
VALUES('$first_name','$last_name')
");
setcookie("CookieID",
mysql_insert_id(),
time() +94608000,
"/");/*The cookie will expire after three years*/
?>
The PHP function mysql_insert_id() returns the value returned by The value of the field defined by AUTO_INCREMENT. In this way, as long as you don’t clear your browser’s cookies, the website will “remember” you forever
Read cookies
Let’s write a script like what Amazon.com does . First, the PHP script will check whether the client's browser has sent a cookie. If so, the user's name will be displayed. If the cookie is not found, a form is displayed asking the customer to register their name, then added to the database and the cookie is set while the customer is browsing.
First, let’s display the content of the cookie:
print$CookieID; > mysql_connect(localhost,username,password);
mysql_select_db(dbname);
$selectresult=mysql_query("SELECT*FROMtablename
WHEREUSERID='$CookieID'
" );
$row=mysql_fetch_array($selectresult);
echo "Welcome",$row[first_name],"!";
?>
That's it. I have no judgment in it and leave it to you to complete it
http://www.bkjia.com/PHPjc/315307.html

PHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.

The security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.

PHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita

ToretrievedatafromaPHPsession,startthesessionwithsession_start()andaccessvariablesinthe$_SESSIONarray.Forexample:1)Startthesession:session_start().2)Retrievedata:$username=$_SESSION['username'];echo"Welcome,".$username;.Sessionsareserver-si

The steps to build an efficient shopping cart system using sessions include: 1) Understand the definition and function of the session. The session is a server-side storage mechanism used to maintain user status across requests; 2) Implement basic session management, such as adding products to the shopping cart; 3) Expand to advanced usage, supporting product quantity management and deletion; 4) Optimize performance and security, by persisting session data and using secure session identifiers.

The article explains how to create, implement, and use interfaces in PHP, focusing on their benefits for code organization and maintainability.

The article discusses the differences between crypt() and password_hash() in PHP for password hashing, focusing on their implementation, security, and suitability for modern web applications.

Article discusses preventing Cross-Site Scripting (XSS) in PHP through input validation, output encoding, and using tools like OWASP ESAPI and HTML Purifier.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SublimeText3 English version
Recommended: Win version, supports code prompts!

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Mac version
God-level code editing software (SublimeText3)

SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.
