Re: base64-encoding in cookies?

# fletcher@cs.utexas.edu / 2007-02-08 15:23:45 -0600: > Robert Cummings writes: > > If val can be any value then it can also be: > > > > expires=time; path=/path/ > > > > Obviously, that would be an issue since that's part of the cookie > > parameters. As such, it needs to be encoded. Now go away! > > > > :) > > I would argue that if someone were to embed these parameters inside > a cookie's "value" parameter, then they lose all rights to the original > semantics. But this is getting silly. > > I find it interesting that nobody has been able to cite a standard > or even point to documentation of this "feature". setcookie() follows no standard, it's just a high-level interface with a quirk. The only standard to cite here is called "Histerical raisins". -- How many Vietnam vets does it take to screw in a light bulb? You don't know, man. You don't KNOW. Cause you weren't THERE. http://bash.org/?255991