You could store the user's id in a cookie, then use that to get the avatar. I don't know if you could or that you'd want to save the entire avatar image in a cookie. If you have user profiles available to guests then you already have the ability for anyone to see the avatar just by providing the userid, so you're not exposing anything extra. Just don't do anything that assumes they are really that user based on the cookie.
Edit: There's also the issue of more than one person using a computer, or using public computers, which I believe is why the cookies are normally all deleted when you log out.
|