session-cookies – Page 3

Scrapy – how to manage cookies/sessions

March 24, 2023 by Tarik

Three years later, I think this is exactly what you were looking for: http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#std:reqmeta-cookiejar Just use something like this in your spider’s start_requests method: for i, url in enumerate(urls): yield scrapy.Request(“http://www.example.com”, meta={‘cookiejar’: i}, callback=self.parse_page) And remember that for subsequent requests, you need to explicitly reattach the cookiejar each time: def parse_page(self, response): # do some … Read more

localStorage vs sessionStorage vs cookies

February 19, 2023 by Tarik

localStorage and sessionStorage are both so-called WebStorages and features of HTML5. localStorage stores information as long as the user does not delete them. sessionStorage stores information as long as the session goes. Usually until the user closes the tab/browser. cookies are simply cookies, which are supported by older browsers and usually are a fallback for … Read more

How to set expiration date for cookie in AngularJS

February 5, 2023 by Tarik

This is possible in the 1.4.0 build of angular using the ngCookies module: https://docs.angularjs.org/api/ngCookies/service/$cookies angular.module(‘cookiesExample’, [‘ngCookies’]) .controller(‘ExampleController’, [‘$cookies’, function($cookies) { // Find tomorrow’s date. var expireDate = new Date(); expireDate.setDate(expireDate.getDate() + 1); // Setting a cookie $cookies.put(‘myFavorite’, ‘oatmeal’, {‘expires’: expireDate}); }]);

What is the difference between Sessions and Cookies in PHP?

February 4, 2023 by Tarik

A cookie is a bit of data stored by the browser and sent to the server with every request. A session is a collection of data stored on the server and associated with a given user (usually via a cookie containing an id code)

How to secure the ASP.NET_SessionId cookie?

January 30, 2023 by Tarik

To add the ; secure suffix to the Set-Cookie http header I simply used the <httpCookies> element in the web.config: <system.web> <httpCookies httpOnlyCookies=”true” requireSSL=”true” /> </system.web> IMHO much more handy than writing code as in the article of Anubhav Goyal. See: http://msdn.microsoft.com/en-us/library/ms228262(v=vs.100).aspx

Check if cookies are enabled

January 28, 2023 by Tarik

JavaScript In JavaScript you simple test for the cookieEnabled property, which is supported in all major browsers. If you deal with an older browser, you can set a cookie and check if it exists. (borrowed from Modernizer): if (navigator.cookieEnabled) return true; // set and read cookie document.cookie = “cookietest=1”; var ret = document.cookie.indexOf(“cookietest=”) != -1; … Read more

What is the difference between session_unset() and session_destroy() in PHP?

January 18, 2023 by Tarik

session_unset just clears the $_SESSION variable. It’s equivalent to doing: $_SESSION = array(); So this does only affect the local $_SESSION variable instance but not the session data in the session storage. In contrast to that, session_destroy destroys the session data that is stored in the session storage (e.g. the session file in the file … Read more

How to delete cookies on an ASP.NET website

January 9, 2023 by Tarik

Try something like that: if (Request.Cookies[“userId”] != null) { Response.Cookies[“userId”].Expires = DateTime.Now.AddDays(-1); } But it also makes sense to use Session.Abandon(); besides in many scenarios.

How does cookie “Secure” flag work?

December 30, 2022 by Tarik

The client sets this only for encrypted connections and this is defined in RFC 6265: The Secure attribute limits the scope of the cookie to “secure” channels (where “secure” is defined by the user agent). When a cookie has the Secure attribute, the user agent will include the cookie in an HTTP request only if … Read more

How to do stateless (session-less) & cookie-less authentication?

December 20, 2022 by Tarik

Ah, I love these questions – maintaining a session without a session. I’ve seen multiple ways to do this during my stints during application assessments. One of the popular ways is the playing tennis way that you mentioned – sending the username and password in every request to authenticate the user. This, in my opinion, … Read more