Sessions are *not* stored in cookies; they are stored in memory on the web server.
What gets stored at the client in a cookie is the *session ID* (to related the user's session ID to the session memory on the server) and not the actual contents. This session ID is stored as a session cookie which means it's (usually??) stored in the memory of the client machine, and not in a file.
Cheers,
Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
|