please dont rip this site

Platform SDK: IIS SDK

      [IIS 5.0] [IIS 5.1] [IIS 6.0]

Response.Cookies Collection

The Cookies collection sets the value of a cookie. If the specified cookie does not exist, it is created. If the cookie exists, it takes the new value, and the old value is discarded.

Cookies should never be used to store secure data, such as passwords. Cookies are transmitted as clear text. If a malicious user taps an internet connection, then they can take cookie data to impersonate a client and gain access to their data. If you must transmit sensitive data, do so on a Secure Sockets Layer (SSL) connection. For more information on SSL, see "Secure Sockets Layer" in IIS Help, which is accessible from IIS Manager.


Response.Cookies( cookie)[( key)|. attribute] = value


The name of the cookie.
An optional parameter. If key is specified, Cookie is a dictionary, and key is set to value.
Specifies information about the Cookie itself. The attribute parameter can be one of the following.
Name Description
Domain Write-only. If specified, the Cookie is sent only to requests to this domain.
Expires Write-only. The date on which the Cookie expires. This date must be set in order for the Cookie to be stored on the client's disk after the session ends. If this attribute is not set to a date beyond the current date, the Cookie expires when the session ends.
HasKeys Read-only. Specifies whether the cookie contains keys.
Path Write-only. If specified, the Cookie is sent only to requests to this path. If this attribute is not set, the application path is used.
Secure Write-only. Specifies whether the Cookie is secure.
Specifies the value to assign to key or attribute.


If a Cookie with a key is created, as shown in the following script,


  Response.Cookies("mycookie")("type1") = "sugar"

  Response.Cookies("mycookie")("type2") = "ginger snap"


The following header is sent:


A subsequent assignment to myCookie without specifying a key would destroy the type1 and type2 keys, as shown in the following example:

<% Response.Cookies("myCookie") = "chocolate chip" %> 

In the preceding example, the type1 and type2 keys are destroyed and their values are discarded. The myCookie cookie now has the value chocolate chip.

Conversely, if you use a Cookie with a key, it destroys any nonkey values that the Cookie contained. For example, if after the preceding code you call Response.Cookies with the following:

<% Response.Cookies("myCookie")("newType") = "peanut butter" %> 

The value chocolate chip is discarded and newType would be set to peanut butter.

To determine whether a cookie has keys, use the following syntax:

<%=index.html Response.Cookies("myCookie").HasKeys %> 

If myCookie is a cookie dictionary, the preceding value is TRUE. Otherwise, it is FALSE.

You can use an iterator to set cookie attributes. For example, to set all of the cookies to expire on a particular date, use the following syntax:


  For Each cookie in Response.Cookies

    Response.Cookie(cookie).Expires =index.html #July 4, 1997#



You can also iterate through the values of all the cookies in a collection, or all the keys in a cookie. However, if you try to iterate through the values for a cookie that does not have keys, nothing will be returned. To avoid this, you can first use the .HasKeys syntax to check whether a cookie has any keys, as shown in the following example.


  If Not cookie.HasKeys Then

    'Set the value of the cookie. 

    Response.Cookies(cookie) = ""


    'Set the value for each key in the cookie collection.

    For Each key in Response.Cookies(cookie)

      Response.Cookies(cookie)(key) = ""




The following examples demonstrate how you can set a value for a cookie and assign values to its attributes.


  Response.Cookies("Type") =index.html "Chocolate Chip"

  Response.Cookies("Type").Expires = "July 31, 2001"

  Response.Cookies("Type").Path = "/"


caution Caution  Do not store sensitive data, such as passwords or account numbers in cookies. For more detailed information on security, see MS Press - Writing Secure Code

Applies To

Response Object

See Also


Platforms: Windows 2000 with IIS 5.0 installed, Windows XP with IIS 5.1 installed, Windows Server 2003 family with IIS 6.0 installed

Platform SDK Release: February 2003
What did you think of this topic?
Order a Platform SDK CD

file: /Techref/language/asp/OBJ/ref_vbom_resoccook.htm, 8KB, , updated: 2007/8/2 19:58, local time: 2024/6/19 03:38,

 ©2024 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions?
Please DO link to this page! Digg it! / MAKE!

<A HREF=""> Response.Cookies Collection</A>

After you find an appropriate page, you are invited to your to this massmind site! (posts will be visible only to you before review) Just type a nice message (short messages are blocked as spam) in the box and press the Post button. (HTML welcomed, but not the <A tag: Instead, use the link box to link to another page. A tutorial is available Members can login to post directly, become page editors, and be credited for their posts.

Link? Put it here: 
if you want a response, please enter your email address: 
Attn spammers: All posts are reviewed before being made visible to anyone other than the poster.
Did you find what you needed?

  PICList 2024 contributors:
o List host: MIT, Site host, Top posters @none found
- Page Editors: James Newton, David Cary, and YOU!
* Roman Black of Black Robotics donates from sales of Linistep stepper controller kits.
* Ashley Roll of Digital Nemesis donates from sales of RCL-1 RS232 to TTL converters.
* Monthly Subscribers: Gregg Rew. on-going support is MOST appreciated!
* Contributors: Richard Seriani, Sr.

Welcome to!