To become a more well-rounded developer, having a better understanding of security concerns and best practices will help me endeavor to build web-apps that are both user-friendly as well as secure.
I'm currently working with cookies using PHP for a login script and have heard that storing a hashed password in a cookie is not a good practice. The only scenario where I thought this would be an issue would be if someone left their computer unlocked and an intruder was able to impersonate the computer owner during the login process. I told him Amazon does this- where users are logged into their account while they shop for things- but my friend countered, citing how Bank of America kicks the user out after being idle for a few minutes.
I Googled my question where I found only implementation methods instead of providing different scenarios of how staying logged in would be a bad thing.