I'm trying to create a webpage that can view a curtain cookie.. this cookie is from another webpage.. I know what I tis called.. its called zapperz.. I know how to view the cookie value by viewing my cookies.. but Its really hard to explain it to some of my friends.. So does anyone know how to create a javascript function or something that would allow them to see the value of the cookie? I dont think doccument.cookie would do any good since its only relative to that doccument..

the cookie zapperz is created on a private webpage that I dont wanna put down right now.. the value of the cookie is set and they can view it if they go through the options and crap but I just want an easy page that states the value of the cookie zapperz.. also this page would have to be on a completely seperate site that only allows javascript, css, and html

Just to make it clear.. I dont wanna view their cookie value.. I want them to be able to view their own cookie value from the other site..

any help would be greatly appreciated

Quote: Originally Posted by DavidVaini I dont think doccument.cookie would do any good since its only relative to that doccument..

After doing some research it isnt possible to request the value of a cookie that was set on another page.. so Im thinkin I would have to implement some sort of XSS... AKA cross site scripting.. problem with that though is that script tags are disabled on the other site.. but then I got to thinking.. Flash is accepted on that site.. so couldnt I make a swf to call for the cookie and then submit it to the display page to show the cookie value? idk if this would work though... again any help would be appreciated

Okay, so Site 1 sets a cookie. You want to be able to create a page on Site 2 that displays that cookie.

What if you create a simple page on Site 1 that displays the cookie, then create a page on Site 2 that contains an IFRAME whose SRC attribute is set to the page on Site 1?

Quote: Originally Posted by FunkyFresh Okay, so Site 1 sets a cookie. You want to be able to create a page on Site 2 that displays that cookie. What if you create a simple page on Site 1 that displays the cookie, then create a page on Site 2 that contains an IFRAME whose SRC attribute is set to the page on Site 1?

Site one doesnt allow the script tag to be used.. so displaying the cookie would be kinda imposible.. only way I could think of doing that is use a flash movie to call the javascript for the cookie.. and even then im not sure it would work...

does anyone know how to request a browser cookie in actionscript?

I dont know the command and I cant seem to find it anywhere... I already have all the other code set up that would set such cookies value to a variable and have that vairable read by a dynamic textbox..

after hours and hours of trying to figure it out I finally found the solution.. but then I relized the sort of problems it could bring for so many sites.. for instance.. I could post the swf on myspace.. so when they click on it it sends me the cookie that stores all the login information for that user.. so I could easliy hack anyones myspace.. this sorta thing isnt cool cause Its a huge security flaw for cookie bassed websites..

I thought the whole point of cookies was that only the site that created them could read them....?

Quote: Originally Posted by Dex I thought the whole point of cookies was that only the site that created them could read them....?

yes thats true.. but I found a way for a flash doccument thats on the site to read the cookies from the site.. then it passes them through onto my site.. thus creating the security problem... virtually i could read any bodies cookie from any site that the flash doccument is on.....
then i could replace my cookie value with their cookie value and now have access to their account..
thats not good.. I beleive in privacy so im gonna delete the flash doccument and all the related code and research