[thelist] cookies: can a user edit them?

Bruce Heerssen bheerssen at visualbridge.tv
Fri May 18 10:10:32 CDT 2001


An additional note: a user can edit cookies in an effort to break into server
systems. The same precautions you take with form and url data should be taken
with cookie data.

Linsay Evans wrote:

> yes
>
> yes
>
> and...
>
> yes
>
> --
<snip>

In response to this from Bernard Silva:

> Hi all,
>
> I've always wondered what would happen if I open a cookie file on my
> computer and edit some of text and save it?
>
> Would the website that set the cookie still be able read it?
>
> Could I set the cookie to expire in a week's time instead of in 23 years
> time?





More information about the thelist mailing list