We know http's cookie and session. But I still have two questions:
Whether cookie must use with session?
if Client user do not login, the Server will not create session, right?
We know http's cookie and session. But I still have two questions:
Whether cookie must use with session?
if Client user do not login, the Server will not create session, right?
When the client login you should create set new cookies on the session based on the strategy you wish to mange it, for example session-cookies erase once the tab is closed. "if Client user do not login, the Server will not create session, right?" - It depends on your server, some servers creates cookies explicitly upon request.