Those are some UGLY cookies you're making there. Why not just create a session id that you store in a table with all the stuff in %ui ? Then you just set the session id as the cookie, and when the user comes back you do a simple DBI query to get who they are from your "session" table.

I suspect that IIS is just balking at setting a cookie with all the wierdo stuff that you're putting into the value, and there is probably a maximum cookie value length, too.

Have you checked the error logs to see if IIS is saying anything when you try to set this cookie?

You may get some love from IIS if you HTML escape your value, if you use CGI.pm it's as simple as "$cookie_value=$q->escapeHTML($cookie_value)"

-Any sufficiently advanced technology is
indistinguishable from doubletalk.