RE: [PHP-GENERAL] Cookies/Remeber password

From: Date: Wed, 21 Jun 2000 22:38:38 +0000
Subject: RE: [PHP-GENERAL] Cookies/Remeber password
Groups: php.general 
Request: Send a blank email to php-general+get-2536@lists.php.net to get a copy of this message
Addressed to: Webmaster <webmaster@accessinter.net> php-general@lists.php.net ** Reply to note from Webmaster <webmaster@accessinter.net> Wed, 21 Jun 2000 12:48:15 -0500 > > Aren't cookies changed when response is coming from web server that > created them? I don't think so. The server sends a cookie to your pc. From then on every time your pc sends a request to that server it includes the cookie in the headers of the request. It only changes when it expires (stops being sent) or is updated by the server. > So was big deal if someone copy a cookie from my pc? > If you have username/password combinations stored in cookies on your PC, I can grab the cookies.txt file from your machine, put it on my machine and impersonate you. Does that matter? If you are using the cookie to make it easier for me to look at your free newspaper articles while limiting it to only registered users, probably not. If you are trying to secure information on how to disarm nuclear weapons, it might. Rick Widmer Internet Marketing Specialists www.developersdesk.com

« previous php.general (#2536) next »