do cookies contain passwords??

i would like to know wheather cookies handles passwords.if so where they contain.

ravikiran032

Light Poster

39 posts since Jun 2008

Reputation Points: 3

Solved Threads: 0

3 Years Ago

0

normally no, username maybe, but from a little I had read, some may contain your sessionId etc.

stephen84s

Nearly a Posting Virtuoso

1,443 posts since Jul 2007

Reputation Points: 668

Solved Threads: 154

3 Years Ago

0

No cookies are stored in client's machine and since they are not a secure enough to hold confidential information so they do not contain password. However as a text you can put password in cookies but you shouldn't do so. Password once validated should not be stored in any medium like cookies or session.

jack239

Newbie Poster

14 posts since Aug 2008

Reputation Points: 13

Solved Threads: 1

3 Years Ago

0

Cookies should never contain passwords. You can have a cookie contain a session id. The session id can then point to a user in a database. From the database you can easily cross reference the user's password. By doing it this way you can have the session expire in the database after a few hours/days and also have the cookie to do the same.

paradox814

Posting Whiz

351 posts since Oct 2004

Reputation Points: 13

Solved Threads: 4

3 Years Ago

0

they shouldn't, but that doesn't mean they don't...
It all depends on how the website was programmed.

jwenting

duckman

Team Colleague

8,392 posts since Nov 2004

Reputation Points: 1,662

Solved Threads: 337

do cookies contain passwords??

This question has already been solved