RE: [PHP-GENERAL] Cookies/Remeber password
| From: | php3 at developersdesk dot com | Date: | Wed, 21 Jun 2000 22:38:38 +0000 |
| Subject: | RE: [PHP-GENERAL] Cookies/Remeber password | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-2536@lists.php.net to get a copy of this message | ||
Addressed to: Webmaster <webmaster@accessinter.net>
php-general@lists.php.net
** Reply to note from Webmaster <webmaster@accessinter.net> Wed, 21 Jun 2000 12:48:15 -0500
>
> Aren't cookies changed when response is coming from web server that
> created them?
I don't think so. The server sends a cookie to your pc. From then on
every time your pc sends a request to that server it includes the
cookie in the headers of the request. It only changes when it expires
(stops being sent) or is updated by the server.
> So was big deal if someone copy a cookie from my pc?
>
If you have username/password combinations stored in cookies on your
PC, I can grab the cookies.txt file from your machine, put it on my
machine and impersonate you.
Does that matter?
If you are using the cookie to make it easier for me to look at your
free newspaper articles while limiting it to only registered users,
probably not. If you are trying to secure information on how to disarm
nuclear weapons, it might.
Rick Widmer
Internet Marketing Specialists
www.developersdesk.com