1. The session is stored on the server side, and the cookie is stored on the client side.
2. The session will be closed with the end of the session, and the cookie will be stored on the client browser and will be valid for a long time.
3. The session saves the object, and the cookie saves the string
4. The information stored in the cookie is easy to leak, usually only the unimportant information is stored, and the important information is placed in the session