3 ms·
How would you login without cookies anyway?
by Xymak1y 14y ago
How would you login without cookies anyway?
- waterhouse 14y agoI believe a cookie is a datum given by the server to the client so that the client may present it to the server when making requests later. This is entirely voluntary on the part of the client; the client is free to pretend it has never received any cookies, or to present a made-up cookie (though the server would likely recognize that as suspicious). Browsers are likely to mindlessly accept cookies from servers and to obey servers' instructions as to when to present the cookies back to the server; but obviously a bot is likely to be more sophisticated, and to not present any cookies other than ones that say "You have successfully authenticated yourself as user xxx".
- kappaloris 14y agoyou put the session id inside the url params :3
- neurostimulant 14y agoBut then the session id can leak via referer header :(
- dvhh 14y agoHe was suppose to give a solution to parent's question, not necessary a secure one.