# [EMAIL PROTECTED] / 2007-02-08 15:23:45 -0600:
> Robert Cummings writes:
> > If val can be any value then it can also be:
> > 
> >     expires=time; path=/path/ 
> > 
> > Obviously, that would be an issue since that's part of the cookie
> > parameters. As such, it needs to be encoded. Now go away!
> > 
> > :)
> 
> I would argue that if someone were to embed these parameters inside
> a cookie's "value" parameter, then they lose all rights to the original
> semantics.  But this is getting silly.
> 
> I find it interesting that nobody has been able to cite a standard
> or even point to documentation of this "feature".

setcookie() follows no standard, it's just a high-level interface with a
quirk.  The only standard to cite here is called "Histerical raisins".

-- 
How many Vietnam vets does it take to screw in a light bulb?
You don't know, man.  You don't KNOW.
Cause you weren't THERE.             http://bash.org/?255991

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to