Phoenix Network Forums

If you are basing the authentication on a username stored in a cookie then there is no security in doing so, all a user need to have in an administrator username, then modify the cookie and bam they have access to an admin account of your game.

How is that secure?

If you are comparing the password and username with the permissions and user data in the db tables each time then that might be reasonable, depends on how its done and how you look at it.

mikey1090, you have basically no understanding of security at all. Stop posting in security related threads, please.

If you really intend to make a secure system, you need to learn encryption with knowledge in networking helpful. Try taking up PHP and learning about sessions if you want a quick way.