Cookie expiration and security in PHP - Mini Project: Build & Apply

Cookie expiration and security

📖 Scenario: You are building a simple PHP web application that uses cookies to remember user preferences. To keep users safe and improve their experience, you need to set cookies with proper expiration times and security flags.

🎯 Goal: Create a PHP script that sets a cookie with a specific expiration time and security settings, then displays a message confirming the cookie is set.

📋 What You'll Learn

Create a cookie named user_preference with the value dark_mode.

Set the cookie to expire in 7 days.

Ensure the cookie is only sent over secure HTTPS connections.

Make the cookie inaccessible to JavaScript by setting the HttpOnly flag.

Display a confirmation message that the cookie is set.

💡 Why This Matters

🌍 Real World

Cookies are used in websites to remember user settings like themes or login status. Setting expiration and security flags helps protect user data and improve experience.

💼 Career

Web developers must know how to manage cookies securely to protect users from attacks like session hijacking and to comply with privacy standards.

1

Create the cookie with name and value

Write PHP code to create a cookie named user_preference with the value dark_mode.

PHP

<?php
// Create a cookie named user_preference with value dark_mode
// Your code here

Need a hint?

Use the setcookie function with the first two parameters as the cookie name and value.

2

Add expiration time for the cookie

Modify the setcookie call to set the cookie to expire in 7 days using the time() function.

PHP

<?php
// Set cookie to expire in 7 days
// Your code here

Need a hint?

Add the third parameter to setcookie as time() + 7 * 24 * 60 * 60 to set expiration 7 days from now.

3

Add security flags to the cookie

Update the setcookie call to include the secure flag set to true and the httponly flag set to true.

PHP

<?php
// Add secure and httponly flags to the cookie
// Your code here

Need a hint?

Use the 4th to 7th parameters of setcookie to set path, domain, secure, and httponly flags respectively.

4

Display confirmation message

Write a print statement to display the message "Cookie 'user_preference' has been set with security flags.".

PHP

<?php
// Print confirmation message
// Your code here

Need a hint?

Use print to show the exact message.