I'm building an apache module that works with cookies and am curious in how easy (or possible) it would be for an end-user to change the expiry date/time of a cookie.
My initial code sets the cookie to expire in a day but my stats will get skewed a bit if someone has this cookie for weeks...
There's a plug-in for Firefox that lets a user muck with the contents of cookies, or at least I think there is. Very few people bother to look inside cookies beyond finding out where they come from. It is possible for you to encode a checksum in your cookie data that is calculated on some representation of the data that you put in it, but not on the data pattern (text) in the cookie itself. This would be difficult for the user to update if they updated the expiration date in the cookie, and you could ignore data from cookies that had bad checksums.
I hope this helps.
Insert obnoxious but pithy remark here
Thanks for the reply,
I'm thinking I could embed the number of days since epoch in the cookie's value string
Last edited by ginoitalo; 03-09-2006 at 05:03 PM.
