> You should check the spec for cookies.  There are several
> limitations including:
>
> 4k per cookie
> 20 cookies per domain

Even if you get beyond these limits and manage to somehow encrypt your large
data, you do realize that your "lots of user information" is going to be
sent across the wire with every single page request right?  Just 100K of
data?  Might as well plop down 100 extra K on each page.

Gonna slow you down me thinks...

-Cameron

--------------------
Cameron Childress
elliptIQ Inc.
p.770.460.1035.232
f.770.460.0963
--
http://www.neighborware.com
America's Leading Community Network Software





> -----Original Message-----
> From: Howie Hamlin [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 22, 2002 12:08 PM
> To: CF-Talk
> Subject: Re: well-baked cookies
>
>
> You should check the spec for cookies.  There are several
> limitations including:
>
> 4k per cookie
> 20 cookies per domain
>
> Also, there are security risks involved with storing infomation
> on the client.  I personally think that it's best to store tracking
> information in cookies and the actual client or session data on
> the server.
>
> Here's the original Netscape cookie spec:
>
> http://home.netscape.com/newsref/std/cookie_spec.html
>
> More stuff inline below...
>
> HTH,
>
> --
> Howie Hamlin - inFusion Project Manager
> On-Line Data Solutions, Inc. - www.CoolFusion.com  - 631-737-4668 x101
> inFusion Mail Server (iMS) - The Intelligent Mail Server
> >>> Find out how iMS Stacks up to the competition:
> http://www.coolfusion.com/imssecomparison.cfm
>
>
> ----- Original Message -----
> From: "Mike" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Tuesday, January 22, 2002 11:56 AM
> Subject: well-baked cookies
>
>
> > I'm trying to push cfcookie's usage to the limit, by storing and reading
> > lots of user information on it.
> >
> > Can someone share some thoughts on the following?
> >
> > 1. is it possible to store complexed variables (i.e - arrays and/or
> > structure) into a cookie?
>
> Yes, as long as it's text.
>
> > is that adviseable?
> >
>
> I don't think so...
>
> > 2. is it possible to store XML or WDDX packets into Cookie?
> >
>
> Yes - xml is only text.  However, you would need to URL encode
> the XML and you are limited to only 4k.
>
> > 3. is it possible to store encrypted values in a cfcookie, i.e:
> >
> > <cfcookie name="foo" value="#Encrypt(foo,"123")#">
> > and then re-use the ordinary within a cfquery
> >
>
> Yes...
>
> > SELECT from ..... WHERE userpassword='#Decrypt(Cookie.foo,"123")#'
> >
> > does this takes noticable time and process usage? I mean - much
> more then
> > NOT encrypting?
> >
>
> I doubt that the process time is appreciable...
>
>
> > -M.
> >
> 
______________________________________________________________________
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation � $99/Month � Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to