Beefy Boxes and Bandwidth Generously Provided by pair Networks
go ahead... be a heretic
 
PerlMonks  

Re: Re: Cookies & Encryption

by chiller (Scribe)
on Apr 14, 2002 at 22:35 UTC ( [id://159032]=note: print w/replies, xml ) Need Help??


in reply to Re: Cookies & Encryption
in thread Cookies & Encryption

So, if I understand you right, I should make a key using Digest::MD5, store it in a database, then insert this key into a cookie. Then check for its existence in a database? But then someone could edit their cookie and log in as any user?!

I suppose if someone got that key out of the database it'd be bad. Is this about as secure as is typically necessary?

Also it doesn't look like that article has much to do with encryption...

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://159032]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others about the Monastery: (4)
As of 2024-04-13 21:53 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found