[PHP]COOKIE or coding

["Zhao chunliang[chunliang.zhao]" <chunliang.zhao@xxxxxxxxxxxx>]

Dear: all

                  

                   That is very abnormality.

 

                   １．Open　the url : http://127.0.0.1/showCookie.php

                            ShowCookie.php   code:

                                     <?php

                                               var_dump($_COOKIE);

                                     ?>

                            That's print: 

                                               [TCSPUBLICJAUTHM] => USER_ID=/zhW/2QXY/GUtIN7m4 dNQ==  

                  

                   ２．　The same window, input the string  "_javascript_:alert(document.cookie);" and enter, it's show :

                           

                  

                   ３．　now , I change the showCookie.php

                                     <?php

                                               echo "<script>alert('" . $_COOKIE['TCSPUBLICJAUTHM'] . "');</script>";

                                               var_dump($_COOKIE);

                                     ?>

                             That's print:

                           

                                          

                   I think the cookie in php being changed.  

                  Look forward to your help