I am developing a site where access to certain pages might require the user to sign in. (he/she writes his username and password)
if the user has successfully signed in he/she can then access this pages.
How does the server know that this is the case ?
Does it figure the IP address of the sender when he/she establish the connection ? Does it set up a timeout variable on its side so to say: 'you have been disconnected because your activity was idle for 10 minutes' ???
Many websites have this abilities on I just don't know how this is done.
Can somebody explain ?