3 ms·
> if you would have only cookie with user id then anyone would be able to pretend to be anyone by manually setting the cookie with some user's uid. That's what
by parker_mountain 4y ago
> if you would have only cookie with user id then anyone would be able to pretend to be anyone by manually setting the cookie with some user's uid.
That's what session id (as mentioned in the article) is for.