Re: base64-encoding in cookies?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



# fletcher@xxxxxxxxxxxxx / 2007-02-08 15:23:45 -0600:
> Robert Cummings writes:
> > If val can be any value then it can also be:
> > 
> >     expires=time; path=/path/ 
> > 
> > Obviously, that would be an issue since that's part of the cookie
> > parameters. As such, it needs to be encoded. Now go away!
> > 
> > :)
> 
> I would argue that if someone were to embed these parameters inside
> a cookie's "value" parameter, then they lose all rights to the original
> semantics.  But this is getting silly.
> 
> I find it interesting that nobody has been able to cite a standard
> or even point to documentation of this "feature".

setcookie() follows no standard, it's just a high-level interface with a
quirk.  The only standard to cite here is called "Histerical raisins".

-- 
How many Vietnam vets does it take to screw in a light bulb?
You don't know, man.  You don't KNOW.
Cause you weren't THERE.             http://bash.org/?255991

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux