Can cookies be edited by user?

Forum Moderators: coopster

Message Too Old, No Replies

Can cookies be edited by user?

brendan3eb

6:23 am on Mar 20, 2005 (gmt 0)

Can cookies I store on a person's computer be edited by that person?

deejay

8:39 am on Mar 20, 2005 (gmt 0)

Sure they can - it's only a text file after all.

I'm wondering why you think anyone would bother though?

The most likely danger to cookies these days is users just deleting them outright over 'spyware' fears.

brendan3eb

5:12 pm on Mar 20, 2005 (gmt 0)

well, im making a few flash games and I know shardObjects can be edited, so I guess im going to have to store game data in sql for now.

StupidScript

12:17 am on Mar 22, 2005 (gmt 0)

Persistent (kept when browser closes) cookies can be modified, but volatile (destroyed when browser closes) cookies cannot. Persistent cookies are written to the hard drive, while volatile cookies are maintained in RAM until the application closes and they are purged from RAM.

If you wish to use cookies to retain game state, you are correct in that this method has little security. Indeed, a database may be your best solution.