HTTP: Cookie

Cookie is used to save key-value pairs on the client side.

Expire if set to 0 equals erase on browser close (Session). If set to time() + (seconds) then the cookie will expire at that particular time.

Path if set to “/” then it will be accessible to every path in the domain (domain.com/*). If set to “/aaa” then it will only be accessible to path domain.com/aaa/*.

Domain if set to “.domain.com” then it will be accessible to every subdomain (*.domain.com). if set to a particular subdomain then it will be only accessible to that particular subdomain.

HttpOnly if set to true then it cannot be read by javascript.

Secure if set to true then it will be sent through https protocol.

Server sends “Set-Cookie: xxx=yyy”

Client sends “Cookie: xxx=yyy”

References:

• Using HTTP cookies – HTTP | MDN (mozilla.org)