in reply to HTTP cookies and spoofing domain names

I think you want to look at the raw_cookie() method in CGI and the stuff in CGI::Cookie. In its documentation, you'll discover that it returns the value of whatever is in the HTTP_COOKIE environment variable. The value is set by the web server when it parses the request.

It's your browser which decides which cookies to add to the request though.

--
brian d foy <brian@stonehenge.com>
  • Comment on Re: HTTP cookies and spoofing domain names