PDA

View Full Version : how does the cookie system work?


Hell Bomb
08-16-2009, 04:24 PM
so, VB sets the cookie, but when it reads the cookie, how does it make sure its valid?
my cookie for my website looks like follows:

as i am unsure of what is stored in these cookies, i have stared out any data that i feel can be used against me :)


so, how does VB chack to amek sure this cookie is real?, i changed my usernumber to see if that it would work, and it did not work, so how does it do it?

--------------- Added 1250446596 at 1250446596 ---------------

comon, someone has got to know how the cookie system checks to make sure the cookie has not been tampred with?

--------------- Added 1250453620 at 1250453620 ---------------

somone pleasE?

Dismounted
08-17-2009, 06:23 AM
vBulletin verifies the password that is stored inside the cookie against the password inside the database. The userid cookie simply tells vBulletin which user should be checked.

Hell Bomb
08-17-2009, 08:56 AM
so, basicly, im makign a script, its going nto run of the forum cookie, so if i tell it to read the user id, verify the password is right using the md5($SQLpassword . $licencenumber), it will work?

i wanted to know, so that they cant just change the digits in the cookie and make it log into my script as someone else?
so, just get it to check that the password is currect?

Dismounted
08-17-2009, 11:28 AM
so, basicly, im makign a script, its going nto run of the forum cookie, so if i tell it to read the user id, verify the password is right using the md5($SQLpassword . $licencenumber), it will work?
Correct.
i wanted to know, so that they cant just change the digits in the cookie and make it log into my script as someone else?
so, just get it to check that the password is currect?
Correct again.

Hell Bomb
08-17-2009, 03:10 PM
thanks, great help :)

--------------- Added 1250531608 at 1250531608 ---------------

and sorry about my poor spelling and typing, i was in a rush :)