SESSION?
Session is better because it saves the value in backend, so the client cannot see the session state.
Use sessions. Session uses cookies to store session Id in browser, just make sure to use http only cookies. http only cookies cannot be accessed by client side JavaScript.
Обсуждают сегодня