Detailed explanation of the difference between cookie and session

Detailed explanation of the difference between cookie and session

These are basic knowledge, but it is necessary to understand it in depth. Let’s give a brief introduction first.

Definition of the two:

When you are browsing the website, the WEB server will first send a small piece of information to your computer, and the cookie will help you type on the website. The text or some selections are

recorded. The next time you visit the same website, the WEB server will first check to see if there is any cookie information it left last time. If so, it will judge the user based on the content in Cookie

and send a specific message. web content for you. The use of cookies is very common. Many websites that provide personalized services use Cookie

to identify users so as to send user-tailored content, such as free email websites with Web interfaces. All use cookies.

Specifically, the cookie mechanism uses a solution that maintains state on the client side, while the session mechanism uses a solution that maintains state on the server side.

At the same time, we also see that since the solution of maintaining state on the server side also needs to save an identity on the client side, the session mechanism may need to use the cookie mechanism

to achieve the purpose of saving the identity. , but it actually has other options.

Cookie mechanism. Orthodox cookie distribution is achieved by extending the HTTP protocol. The server adds a special line of instructions to the HTTP response header to prompt the browser to generate the corresponding cookie according to the instructions. However, pure client-side scripts such as JavaScript or VBScript can also generate cookies. The use of cookies is automatically sent to the server by the browser in the background according to certain principles. The browser checks all stored cookies. If the scope

declared by a cookie is greater than or equal to the location of the resource to be requested, the cookie is attached to the HTTP request header of the requested resource and sent to the server.

The content of cookie mainly includes: name, value, expiration time, path and domain. The path and domain together form the scope of the cookie. If the expiration time is not set, it means that the lifetime of these

cookies is during the browser session. When the browser window is closed, the cookie will disappear. This type of cookie that lasts for the duration of the browser session is called a session cookie.

Session cookies are generally not stored on the hard disk but in memory. Of course, this behavior is not regulated by the specification. If an expiration time is set, the browser will save the cookie

to the hard disk. If you close and open the browser again, these cookies will still be valid until the set expiration time is exceeded. Cookies stored on the hard disk can be shared between different browser processes, such as two IE windows. For cookies stored in memory, different browsers have different processing methods

session mechanisms. The session mechanism is a server-side mechanism. The server uses a structure similar to a hash table (or may use a hash table) to save information.

When the program needs to create a session for a client's request, the server first checks whether the client's request already contains a session identifier

(called session id). If so, Contains indicates that a session has been created for this client before, and the server will retrieve this session according to the session id

(if it cannot be retrieved, a new one will be created). If the client request does not contain the session id, then For this purpose, the client creates a session and generates a session id associated with this session. The value of the session id should be a string that is neither repeated nor easy to find patterns to counterfeit. This The session id will be returned to the client in this response

for storage. The method of saving this session id can use cookies, so that during the interaction process, the browser can automatically send this identifier to the

server according to the rules. Generally, the name of this cookie is similar to SEEESIONID. But cookies can be artificially disabled, and there must be other mechanisms so that when cookies are disabled, the session id can still be passed back to the server.

A frequently used technique is called URL rewriting, which is to append the session id directly to the end of the URL path. There is also a technique called form hidden fields. That is, the server

will automatically modify the form and add a hidden field so that the session id can be passed back to the server when the form is submitted. for example:

ррреее

На самом деле этот прием можно просто заменить, применив к действию перезапись URL.

Разница между файлами cookie и сеансами:

1. Данные файлов cookie хранятся в браузере клиента, а данные сеанса размещаются на сервере.

2. Файлы cookie не очень безопасны. Другие могут проанализировать файлы cookie, хранящиеся локально, и провести обман с использованием файлов cookie.
Учитывая безопасность, следует использовать сеанс.

3.Сессия будет сохранена на сервере в течение определенного периода времени. Когда доступ увеличится, это потребует большей производительности вашего сервера
Учитывая снижение производительности сервера, следует использовать COOKIE.

4. Размер данных, сохраняемых одним файлом cookie, не может превышать 4 КБ. Многие браузеры ограничивают сохранение на сайте до 20 файлов cookie.

5. Личное предложение:
Храните важную информацию, такую ​​как данные для входа в систему, как SESSION
Если необходимо сохранить другую информацию, ее можно поместить в COOKIE

В этой статье объясняется файлы cookie и сеансы. Для подробного объяснения разницы посетите китайский веб-сайт php, где можно найти дополнительную информацию.

Рекомендации по теме:

Простой PHP-класс подкачки MySQL

Две конструкции древовидных массивов без функции рекурсии

#Преобразование HTML в Excel и реализация функций печати и загрузки

The above is the detailed content of Detailed explanation of the difference between cookie and session. For more information, please follow other related articles on the PHP Chinese website!