PHP检查用户是否已登录[最佳实践]

Question

我正在为我们的客户创建一个用户门户网站，但我还没有找到检查用户是否登录的最佳方法。我曾经通过使用authenticate（）函数设置一些会话变量来检查它：

if(!isset($_SESSION['user']) { 
    // logout code 
} 

然后我检查

 public class MapsActivity extends FragmentActivity implements OnMapReadyCallback,GoogleMap.OnMarkerClickListener {

        GoogleMap mMap;
        RequestQueue requestQueue;
        ArrayList<LatLng> points = null;
        PolylineOptions polylineOptions;
        Geocoder geocoder;
        LocationListener locationListener;
        TextView tv,tv_one,tv_two;
        String string;
        @Override
        protected void onCreate(Bundle savedInstanceState) {
            super.onCreate(savedInstanceState);
            setContentView(R.layout.activity_maps);
            SupportMapFragment mapFragment = (SupportMapFragment) getSupportFragmentManager()
                    .findFragmentById(R.id.map);
            mapFragment.getMapAsync(this);
            points = new ArrayList<LatLng>();
            polylineOptions = new PolylineOptions();
            String URL = "http://b2ss2c.com/gtsapi/index.php?cmd=VEHICLE_DETAILS&deviceID=salim_fiat&accountID=gts&fromDate=23-May-2016&toDate=24-May-2016";
            final JsonArrayRequest jsonArrayRequest = new JsonArrayRequest(URL, new Response.Listener<org.json.JSONArray>() {
                @Override
                public void onResponse(org.json.JSONArray response) {
                    for (int i = 0; i < response.length(); i++) {

                        try {
                            JSONObject jsonObject1 = response.getJSONObject(i);
                            String speed=jsonObject1.getString("speed");
                            String deviceID=jsonObject1.getString("deviceID");
                            String altitude=jsonObject1.getString("altitude");
                            String fuelLevel=jsonObject1.getString("fuelLevel");
                            LatLng latLng = new LatLng(jsonObject1.getDouble("latitude"),jsonObject1.getDouble("longitude"));
                            BitmapDescriptor image = BitmapDescriptorFactory.fromResource(R.drawable.car);
                            mMap.setOnMarkerClickListener(MapsActivity.this);
                            Marker marker= mMap.addMarker(new MarkerOptions().position(latLng).icon(image));
                            marker.setTitle("DeviceID:"+deviceID+"\n"+"Speed:"+speed+"\n"+"Altitude:"+altitude+"\n"+"FuelLevel:"+fuelLevel);
                            mMap.moveCamera(CameraUpdateFactory.newLatLngZoom(latLng, 16));
                            points.add(latLng);
                        } catch (JSONException e) {
                            e.printStackTrace();
                        }
                    }
                    polylineOptions.addAll(points);
                    polylineOptions.width(4);
                    polylineOptions.color(Color.BLUE);
                    mMap.addPolyline(polylineOptions);
                }
            }, new Response.ErrorListener() {
                @Override
                public void onErrorResponse(VolleyError error) {

                }
            });
            requestQueue = Volley.newRequestQueue(this);
            requestQueue.add(jsonArrayRequest);
        }
        @Override
        public boolean onMarkerClick(Marker marker) {
            geocoder=new Geocoder(getApplicationContext(), Locale.getDefault());
            if (Geocoder.isPresent()){
                try{
                    List<Address> addresses=geocoder.getFromLocation(marker.getPosition().latitude,marker.getPosition().longitude,1);
                    if (addresses!=null && addresses.size()>0) {
                        android.location.Address address = addresses.get(0);
                        string = String.format("%s %s %s", address.getAddressLine(0),address.getSubLocality(),address.getLocality(),
                                address.getAdminArea(),address.getCountryName());
                        String title=marker.getTitle();
                        marker.setSnippet(title+"\n"+"Address:"+string);
                        marker.showInfoWindow();
                    }else {
                        Toast.makeText(getApplicationContext(),"Address not found",Toast.LENGTH_SHORT).show();
                    }
                }catch (IOException e){
                    e.printStackTrace();
                }

            }
            return false;
        }

        @Override
        public void onMapReady(GoogleMap googleMap) {
            mMap = googleMap;

            mMap.setInfoWindowAdapter(new GoogleMap.InfoWindowAdapter() {
                @Override
                public View getInfoWindow(Marker marker) {
                    return null;
                }

                @Override
                public View getInfoContents(Marker marker) {
                    View view=getLayoutInflater().inflate(R.layout.info_window,null);
                    tv=(TextView)view.findViewById(R.id.tv_address);
                    tv_one=(TextView)view.findViewById(R.id.tv_one);
                    tv_two=(TextView)view.findViewById(R.id.tv_two);
                    String snippet= marker.getSnippet();
                    tv_one.setText(snippet);
                    return view;
                }
            });

        }


    }

如果允许用户访问该页面。

但有人告诉我，我不应该使用会话变量进行授权，而应该查看标题中的访问令牌。我不知道在哪里可以看得更远，任何人都可以通过一些示例代码将我推向正确的方向吗？