I would like to ask, what is the difference between placing the user name in the session and then putting the sessionid into the cookie?

I would like to ask, what is the difference between placing the user name in the session and then putting the sessionid into the cookie? I recently read many posts about secure logon on the website logon page. The most common method is to put the user name into the session and then put the session id into the cookie. What is the difference between putting a user name in a cookie? If not, encrypt it?

Reply to discussion (solution)

Cookie on the client
Session on the server
In terms of privacy protection, it is obvious that the latter is better than the former.