how does the cookie system work?

[Hell Bomb]

so, VB sets the cookie, but when it reads the cookie, how does it make sure its valid?
my cookie for my website looks like follows:

as i am unsure of what is stored in these cookies, i have stared out any data that i feel can be used against me


so, how does VB chack to amek sure this cookie is real?, i changed my usernumber to see if that it would work, and it did not work, so how does it do it?

--------------- Added [DATE]1250446596[/DATE] at [TIME]1250446596[/TIME] ---------------

comon, someone has got to know how the cookie system checks to make sure the cookie has not been tampred with?

--------------- Added [DATE]1250453620[/DATE] at [TIME]1250453620[/TIME] ---------------

somone pleasE?

[Dismounted]

vBulletin verifies the password that is stored inside the cookie against the password inside the database. The userid cookie simply tells vBulletin which user should be checked.

[Hell Bomb]

so, basicly, im makign a script, its going nto run of the forum cookie, so if i tell it to read the user id, verify the password is right using the md5($SQLpassword . $licencenumber), it will work?

i wanted to know, so that they cant just change the digits in the cookie and make it log into my script as someone else?
so, just get it to check that the password is currect?

[Dismounted]

Originally Posted by hellbomb

so, basicly, im makign a script, its going nto run of the forum cookie, so if i tell it to read the user id, verify the password is right using the md5($SQLpassword . $licencenumber), it will work?

Correct.

Originally Posted by hellbomb

i wanted to know, so that they cant just change the digits in the cookie and make it log into my script as someone else?
so, just get it to check that the password is currect?

Correct again.

[Hell Bomb]

thanks, great help

--------------- Added [DATE]1250531608[/DATE] at [TIME]1250531608[/TIME] ---------------

and sorry about my poor spelling and typing, i was in a rush