You can do a pair of cookies, one with the data. the second md5 hashed with the data and a private string that only your cgi knows. That way when the data cookie is retrived you can take the data cookie returned + the private string, then hash and compair to the md5 cookie you sent. It will tell you if the data has been changed.