Hi,
To validate a user, we can do something like:
In login page, check the inputed username and password by database, if pass, set
response.cookies("username") = username.
In any other page, check if
request.cookies("username") <> ""
1. Do you think that way safe? Can a user just diy a...