Re: Web site authentication

Mike,

All the apps we're doing use our own authentication, specifically we're
checking "username" and "password" in a table that represents the
customer/vendors/users/etc. We've found that to be the most flexible
since it allows us to record any attributes about the login we care to
such as enabled/disabled, force password change, invalid attempts, last
login date/time/ip, etc.

As for session management, we're using a browser-cookie to record
"session", but I'm curious what you mean by "persistent sessions".

-Walden