Re: [mod-security-users] processing a cookie

[Alex V. <ale...@ss...>]

On Jeu 13 avril 2006 16:35, joe barbish a =E9crit :
> Thanks Alex
>
>   I didn't use this for the hash because this allows an empty field
>
>   "^[0-9a-zA-Z]*"
>
>   instead I used "^[0-9a-zA-Z=3D]+$" so the field can not be blank and =
the $
> so nothing can exist beyond it.

Ok, you didn't say if you wanted to allow blank field or not...

>
>   For the cookie I would think it needs $ for same reason
>   "^[0-9a-fA-F]{32}$"
>
>   Am I correct in this line of thinking?

Yes you are

>   Is 32 the standard normal default size of php session cookies?

Yes (and AFAIK it's a normal default size for all MD5 (like g=E9n=E9rated=
 by
md5sum, SQL MD5() function, ...)


CU

Alex