Maintaining Session State in a VSP Application tutorial
Basics Cookie example

## Preliminaries

- The cookies can be used to keep session id between two HTTP requests.
- If the target browser can work with cookies, this method can be used instead of URL poisoning.

## Session state in a cookie example

- On login or register, the set-cookie header writes a new session id.
- The authentication function extracts the cookie value from the HTTP header.
- If the session id is not valid, then the browser is redirected to the login page.
- The post processing function is the same as in URL poisoning example.