vb2 see if user is logged in

[forumet]

Is it sufficent to test the bbuserid and bbpassword cookie against the user table or is interaction with the session table needed?

This is for a simple

if(check cookie against db) {
//logged in
} else {
//not logged in
}

[Scott MacVicar]

user table + session table.

Try sessionhash against the session table, if that fails. bbuserid + bbpassword against the user table.

[forumet]

Thanks for your answer, do i only need to check if sessionhash cookie value exists in session table or do i need to check agains userid/host in session table also?

[Scott MacVicar]

sessionhash since the cookie might not always exist if they have cookies disabled.

Sessionhash will either come from _GET / _POST if its a form or a cookie if they have it.

I think we do detected automatically to pick the correct variable but I havent looked at vB2 code in about a year now.