You want the alternative to cookies on browsers that do not support cookies. This function updates the runtime ini values of the corresponding PHP ini configuration keys which can be retrieved with the ini_get(). So it is less secure. It is a standard which can be used any programming language. The session can hold onto your username and password, while you get a cookie stored on your PC. Both of them accomplish much the same thing. The setcookie() function must appear BEFORE the tag. They are started with $_SESSION global variable. we cannot accessing the cookies values in easily.So it is more secure. In this scenario PHP session data can be stored as: We can use some hidden input tags in HTML forms with the name PHPSESSID just after the