php怎么设置和获取cookie_php操作cookie的方法详解

setcookie()

$_COOKIE

setcookie()

expire

time() + 3600

path

domain

/admin/

www.example.com

secure

true

httponly

true

hash_hmac()

$cookie_name = "user_id";
$cookie_value = 123;
$expire = time() + 3600;
$path = "/admin/";
$domain = "www.example.com";
$secure = true;
$httponly = true;

$signature = hash_hmac('sha256', $cookie_value, 'your_secret_key');
$cookie_value_encoded = base64_encode($cookie_value . '|' . $signature);

setcookie($cookie_name, $cookie_value_encoded, [
    'expires' => $expire,
    'path' => $path,
    'domain' => $domain,
    'secure' => $secure,
    'httponly' => $httponly,
    'samesite' => 'Strict' // 推荐设置SameSite属性
]);

if (isset($_COOKIE[$cookie_name])) {
    $cookie_value_encoded = $_COOKIE[$cookie_name];
    $cookie_value_decoded = base64_decode($cookie_value_encoded);
    list($cookie_value, $signature) = explode('|', $cookie_value_decoded, 2);

    $expected_signature = hash_hmac('sha256', $cookie_value, 'your_secret_key');

    if ($signature === $expected_signature) {
        echo "User ID: " . htmlspecialchars($cookie_value); // 注意转义
    } else {
        echo "Cookie is invalid or has been tampered with!";
    }
}

path

domain

$cookie_name = "user_id";
$path = "/admin/";
$domain = "www.example.com";

setcookie($cookie_name, "", time() - 3600, $path, $domain); // 设置过期时间为过去

index.php?PHPSESSID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx