title: Cookie Stealer/Login System (PHP)
body: <p>I've been googling this for some hours but everyone handles it in a different way.</p>
  
  <p>So I'm wondering how to handle the informations when someone logs in.</p>
  
  <p>I thought that I'll save the user ID, name and user-agent-data in the session. But what if someone steals the cookie content and replaces his own cookie with the stolen one?</p>
  
  <p>And yeah, that's actually my question. How can I "protect" the user? Checking the IP as well? Anything else?</p>
  
  <p>Thanks, 
  Albin.</p>