No cookies are stored in client's machine and since they are not a secure enough to hold confidential information so they do not contain password. However as a text you can put password in cookies but you shouldn't do so. Password once validated should not be stored in any medium like cookies or session.
Cookies should never contain passwords. You can have a cookie contain a session id. The session id can then point to a user in a database. From the database you can easily cross reference the user's password. By doing it this way you can have the session expire in the database after a few hours/days and also have the cookie to do the same.
Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.
This thread is more than three months old
No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.