Preventions against copied cookies

PHP
1

Hello

I have a php system which relies on cookies to check if the person is already logged-in on that machine or not. The system checks if there’s a related session entry in the database (random key in the db and cookie), and uses some sort of tokens, also stored in another cookie, to authenticate if the the user iD in the cookies has the same token in the related database entry.

What happens is all these cookies are moved to another computer, will they be successfully authencitcated?, if so What can be done to prevent people from copying and pasting all the cookies in another computer on the same network and then being successfully authenticated?

Thanks

2

If the two computers are on the same network then I don’t think that there is anything that you can do. The only thing close that I can think of is http://php.net/manual/en/function.session-regenerate-id.php make sure you have a good read through the user-contributed notes for that function.