One of the simplest and most overlooked methods of website security is in not protecting website files by blocking access to open web folders.
Easy Website Security
PHP Session Variables
Using session variables in PHP allow the programmer to persist data across multiple webpage calls within the same browser ‘session’.