CODEWITHSUNDEEP
pythonapachehttpcookies
Alistair
Alistair

Reputation: 8706

How do I remove a cookie that I've set on someone's computer?

I've got a web system where users log in, and it stores a cookie of their session. When they log in as someone else or log out I want to remove that original cookie that I stored. What's the best way to do that? I'm using Python and Apache, though I suppose the answer will remain the same for most languages.

Upvotes: 5

Views: 2148

Answers (3)

Dave Cheney
Dave Cheney

Reputation: 5765

Return the header

Set-Cookie: token=opaque; Domain=.your.domain; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

The Domain and Path must match the original attributes that the cookie was issued under.

Upvotes: 1

Richard Turner
Richard Turner

Reputation: 12796

Set the cookie again, as if you hadn't set it the first time, but specify an expiration date that is in the past.

Upvotes: 7

Mats
Mats

Reputation: 14817

I guess the best way is to set the expiration to a date of the cookie to some date in the past.

Upvotes: 4

Related Questions