Simple reference for Cookie programming in ASP. NET

1. Write Cookie

1. the Name and Value attributes are set by the program. The default values are empty references.

2. The default value of the Domain attribute is the Domain name of the current URL, regardless of the directory of the page where the cookie is sent.

For example,Http://www.kent.com/application1/login.aspxSend a cookie on the page. The default Domain attribute isWww.kent.comThe program can set this property as the required value.

3. The default value of the Path attribute is the root directory, that is, "/", regardless of the directory of the page where the cookie is sent. The program can be set to a certain path to further limit the scope of the cookie.

4. Expires attribute, which sets the Cookie expiration date and time. If you do not set the Cookie validity period (the default setting), you can also create a Cookie, but it will not be saved to the user's hard disk, but will become part of the user's session information, when the browser is closed or the session times out, the Cookie disappears. This Cookie is called a non-permanent Cookie. The Cookie for storing SessionID is such a Cookie, which is not stored on the hard disk and only exists in the memory.

5. The Cookie to be sent can be sent to the client by attaching it to the Cookie attribute of Response: Reponse. Cookies. Add (Cookie)

6. All cookies with the same Domain attribute and Path attribute exist in a file on the client. The cookies are separated. The first line of each Cookie is the name of the Cookie, the second line is the value, and the third line is a string consisting of the Domain Attribute + Path attribute, indicating the scope of the Cookie, the other rows contain the daily processing information of cookies, such as the expiration date and time. There is also a simple checksum in the Cookie. If you change the length of the Cookie name or value, the browser will detect the modification and delete the Cookie.

2. Read Cookie

1. The Request. Cookie attribute contains a set of all Cookies sent from the client to the server. Only Cookies within the scope of the Request URL will be sent to the server by the browser along with the Http Request.

2. The attributes of Name and Value and the values of subkeys are easy to read.

3. the Domain and Path attributes cannot be read, The read Domain attribute is always "", and the read Path attribute is always "/". These attributes have limited usage. If your page and Cookie are not in the same domain, you will not receive the Cookie at the page location.

4. The Cookie expiration date and time cannot be read. In fact, when the browser sends Cookie information to the server, the browser does not include the expired information. You can read the Expires attribute, but always return a zero date/time value. The Expires attribute is mainly used to help the browser perform daily management of Cookie storage. From the server perspective, the Cookie either exists or does not exist. Therefore, the validity period is not useful for the server.
Therefore, the browser does not provide this information when sending cookies. If you need the Cookie expiration date, you must reset it.

3. Modify and delete cookies

1. In fact, you cannot directly modify a Cookie by creating a Cookie with the same name and sending the Cookie to the browser to overwrite the old Cookie on the client.

2. similarly, you cannot directly delete a Cookie. You can modify a Cookie to allow the browser to help you delete the Cookie. Modify the Cookie's validity period to a certain time in the past, when the browser checks the Cookie validity period, the expired Cookie is deleted.

Relationship between Cookie and Session

1. session in asp.net can adopt cookie and cookieless methods. cookieless places SessionID in the URL and transmits it back and forth between the client and the server without cookie. This method is not discussed here.

2. In asp.net, when the customer requests a URL for the first time, the server generates a SessionID for the customer and sends it to the client using a non-permanent Cookie.

3. Non-permanent cookies disappear only when the browser is closed. The Session timeout is determined as follows:

3.1 When the client accesses the server for the first time, it will get a SessionID and send it to the client as a non-permanent Cookie.

3.2 When you access this URL before closing the browser, the browser will send this SessionID to the server, the server maintains various statuses of the server corresponding to this customer based on the SessionID (that is, various values saved in the Session) and can operate on these sessions in the web application.

3.3 The server maintains the expiration time of this SessionID. You can set the Session Timeout time in IIS. Each request causes the server to extend the expiration time of this SessioID by a set timeout time.

3.4 when the server finds that a SessionID is out of date, that is, a customer has not accessed the site again within the specified timeout period, and deletes the SessionID along with all Session variables related to the SessionID.

3.5 before the browser of the client is closed, the server does not know that the SessionID has been deleted. The client still sends the cookie of this SessionID to the server, but the server does not know the SessionID at this time, the user is treated as a new user and a new SessionID is assigned again.