Tracking users with PHP session id, cookie + database

Question

I have a little doubt about how sessions should be handled.

Now I have a MySQL database, where in the table "users" there is a session_id field. If NULL, the user is not logged in? If the value matches the cookie value PHPSESSID, then the user is logged in.

I don’t know why, but somehow I feel that it’s not good enough to see who I am dealing with. Is there something I'm missing, or are my fears unfounded?

Answer 1

There is nothing significant in what you describe as far as I can judge.

, . ( ..). , . , .

Answer 2

, , " " , , , , . , -, , , - , - (, , 15-30 PHP) , X .

Answer 3

- 1 . , , :

sess_id | sess_userid | sess_ipv4 | sess_lastseen (datetime/timestamp) | sess_sessionid (varchar)

, , , IP-, , , .. , .

, !

, , , ( 15 ?) ., - , , id .