XF 1.2 remember_key

Tyrone Chicken

New member
In the table user_authenticate there is a column called remember key, what is it used for? I'm guessing its for the "keep me logged in" option, but I'm not entirely sure.
 
The cookie that is set after a user selects Remember Me contains the following information:
user_id,remember_key

The key is used to authenticate a user via this method and prevent spoofing of the login. If it was just user_id, anyone could say, login as me just by setting the cookie to include my ID.
 
Top Bottom