Hello fellow Monks

The following code is supposed to store login username in a cookie or clear the existing cookie info if the login fails. The cookie is supposed to be persistant for upto 1yr if auto_login is checked.

The issue I am having trouble with is it is not persistant when set and it is not cleared down correctly.

use CGI;
use CGI::Carp qw{ fatalsToBrowser };
use CGI::Cookie;
use strict;
use HTML::Template;

my $cgi = new CGI();
my $template;
my $validated;

# Validation of login removed

if ($validated) {
  my $cookie = new CGI::Cookie(-name    =>  'star',
                               -value   =>  $cgi->param('username'),
                               -expires =>  $cgi->param('auto_login')?
+'+365d':'+3h');
  print $cgi->header(-cookie=>$cookie);
  $template = HTML::Template->new(filename => 'login-success.tmpl',
                                  die_on_bad_params => 0);
  $template->param('successURL'=> $successurl);
} else {
  my $cookie = new CGI::Cookie(-name    =>  'star',
                               -value   =>  undef,
                               -expires =>  '+1s');
  print $cgi->header(-cookie=>$cookie);
  $template = HTML::Template->new(filename => '../index.html',
                                  die_on_bad_params => 0);
}
print $template->output();
[download]

I am currently at the serious hairloss stage and appear to be blind to the error of my ways.

Asking for a bit a meditation
UnderMine