When some hosts explicitly remove CGI.pm from the core package, they're plain stupid...
Parsing cookies is pretty similar to parsing forms, as it can be broken quite easily if you're not carefull. I'm confident your code is flawded in one way or another (altho I'm not gonna chase the hole). Check merlyn's No excuses about not using CGI.pm. I confess that most of my older CGI code didn't use CGI.pm for that kinda stuff, but now I've payed my sin.

Maybe I should do a use CGI; #damnit! bat too...

Needless to say I know how to parse cookies manually, since I set it manually in my original node :))

Greetz
Beatnik
... Quidquid perl dictum sit, altum viditur.