PDA

View Full Version : Cookies for dummies


dilbert
01-13-2009, 06:40 PM
I have a site that is primarily ColdFusion based. I don't plan to change that.
ColdFusion can read cookies.

I want to have several sections of the site that are designed differently if the user is logged in.

Is there a vB guide for how to read what is in the cookie?

When responding, please keep in mind the title of this post "Cookies for dummies". http://www.vbulletin.com/forum/images/smilies/rolleyes.gif

Here's the cookie from my site. I obscured some data although I suspect it's encrypted and useless.

bblastvisit
1226582224
www.bloodbanktalk.com/ (http://www.bloodbanktalk.com/)
1536
2541979648
30041187
467868448
29967762
*
bblastactivity
0
www.bloodbanktalk.com/ (http://www.bloodbanktalk.com/)
1536
2801979648
30041187
719278448
29967762
*
bbuserid
1
www.bloodbanktalk.com/ (http://www.bloodbanktalk.com/)
9728
2801979648
30041187
719278448
29967762
*
bbpassword
************************
www.bloodbanktalk.com/ (http://www.bloodbanktalk.com/)
9728
2801979648
30041187
719278448
29967762
*

Dismounted
01-14-2009, 02:48 AM
You can verify the user using the userid and password cookies. Check that information against the vBulletin database. (Note that the password is further MD5-hashed and salted using the cookie salt.)

dilbert
01-15-2009, 07:03 PM
Thanks, how can I tell when the cookie expires? Let's say two of my members use the same PC and the set Remember Me to unchecked. I want the non-vB pages to find the active cookie only.

So in my example above, I can clearly see the userid is 1.
How can I tell if the cookie is expired? Or does vB delete the cookie if Remember Me is not checked? Then in my example of more than 1 user, I should not be able to locate any cookie on the users PC, correct?

Yikes, I really have no idea what I am talking about, I hope this makes at least some sense.

Dismounted
01-16-2009, 04:57 AM
If the Remember Me is not checked, no cookies regarding the user ID/password are set. IIRC

Marco van Herwaarden
01-16-2009, 10:12 AM
Actually the session will last the time you have set for Session Timeout in your AdminCP.