+- Krafty Internet Marketing Forum (https://kraftymarketingprofits.com/internetmarketingforum)
+-- Forum: The Marketplace (https://kraftymarketingprofits.com/internetmarketingforum/Forum-the-marketplace--12)
+--- Forum: Want To Buy or Trade (https://kraftymarketingprofits.com/internetmarketingforum/Forum-want-to-buy-or-trade--14)
+--- Thread: Can I edit a cookie to keep me logged into a website indefinitely? (/Thread-can-i-edit-a-cookie-to-keep-me-logged-into-a-website-indefinitely--20368)
Can I edit a cookie to keep me logged into a website indefinitely? - poliq - 05-13-2019
Can't find a lot of current information about this elsewhere. I watch tv online using my friend's cable tv login, but he just canceled his account and the login is dead. However, I can still watch on foxsportsgo.com because I hit the "keep me signed in for 2 weeks" option last time. The 2 weeks is just about up and I was wondering if there's any way to just keep me logged in forever.
I'm on chrome so I downloaded EditThisCookie and had a look. there was a cookie named Authorization with an expiration date of tomorrow(which is 13 days after my last login), so I changed it to sometime in 2027. I also changed it to Read Only so it can't be overwritten (according to some old guide I found). There are some other cookies, I went through and changed most of them to the same 2027 expiration date just in case. Should I mark all of these as read only as well? Is there anything else I can do to try to make this work? I know almost nothing about webdev.
There also has to be a cookie tying his account to south florida, because the team changes to the Miami Heat whenever I log in. I thought that would be GEO_TARGET_COOKIE with a value that changed the region, but the value field just says GEO_TARGET_COOKIE. any ideas? if I stay logged in but have to watch the Magic I'll cry
RE: Can I edit a cookie to keep me logged into a website indefinitely? - Brexit - 05-13-2019
No, you can extend the life of the cookie, but the auth tokens in the cookies will expire so you will lose access.
Auth tokens are signed, meaning you can't change their values without knowing the exact key used to sign them or the server will recognise that they are forged.