Is it safe to store a logged_in option as a SESSION? : <p>Is it safe to set the session <code>logged_in</code> as <code>true</code> if the login is correct? Will the user be able to edit this, or set their own session? </p>
