title: What is a relatively secure way of using a login cookie?
body: <p>I was wondering what the safest way of a cookie login is?
  If you just store the pass(encrypted with salt) and username in the cookie
  and validate it against the user table, a potential attacker can steal a cookie and login.
  People normally don't check there 'last time online'.</p>
  
  <p>So is there a better way for the 'remember me cookie'?
  IP isn't a good option, is it? (Some machines change IP all the time).</p>