使用PHP登录用户需要进行哪些检查？

I'm attempting to write a page that allows a user to remain logged in. Is it simply enough to set a session variable if the site has SSL? I am checking for a session variable that just says the person is logged in.I'm attempting to write a page that allows a us