Training Trains Internship
Student login
← PHP learning path
PHP · Module 6 of 10

Sessions and cookies

Remember users across requests.

📖 Key ideas

  1. session_start() begins a session.
  2. $_SESSION stores data on the server per user.
  3. setcookie() stores small data in the browser.
  4. Regenerate session IDs after login: session_regenerate_id(true).
  5. Use secure, HttpOnly cookie settings.
💡 Real-life example: A session is a cloakroom token: the server keeps your coat, you keep the token.
SessionServer-side user data
$_SESSIONSession data array
CookieSmall data stored in browser
session_regenerate_idNew session ID for safety