in reply to HTTP cookies and spoofing domain names
I think you want to look at the raw_cookie() method in CGI and the stuff in CGI::Cookie. In its documentation, you'll discover that it returns the value of whatever is in the HTTP_COOKIE environment variable. The value is set by the web server when it parses the request.
It's your browser which decides which cookies to add to the request though.
|
|---|