Setting cookies for login

Hello all,

I am building my own CMS and have run across a problem. As with most CMS systems, I want to have a "Remember me" check box under my login that will create a cookie on the client side. The question I am facing is what to store in the cookie. I don't really want to store a username and password in a cookie due to security concerns. Any other ideas as to what I can do?

Thanks for your help in advance.

By the fact that you are adding this feature in the first place is a security concern in it's own right. No matter what is in the cookie, anyone who uses that computer will have complete access to the account that is saved in the cookie. That then puts the security concern on the end user..."Do I want everyone and anyone who uses my computer to be able to access this site as me?" If the user does not care then what is the difference if you use the username and password in the cookie, because the end user has left the door open themselves by selecting "Remember Me". If Security is a concern, I would not offer that feature.

Thanks for the advice. I'm rethinking whether or not to do this.

Best regards!