DB tablo: login_info
--------------------------------------
| login | passwd | company |
--------------------------------------
|company1 | passmd5 | company1 |
--------------------------------------
|company2 | passmd5 | company2 |
--------------------------------------
|company3 | passmd5 | company3 |
--------------------------------------
giriş maçlar kez, giriş ve firma adı bir oturum değişkeni kaydedilir.
$_SESSION['SESS_MEMBER_ID'] = $log['login']; //where $log is the mysql_fetch_assoc result array
$_SESSION['log_company_id'] = $log['company'];
Then using the stored company name in the session variable, the company details are loaded from a company specific db. I am not relying on cookies for storing this information. Is this method safe? Should I do something else? Any other security measures that I should know of?