Im dropping a cookie with userid. Can I encrypt it somehow?

You can do pretty much what you want with it. It is easy enough to create your own simple encryption algorithm for a number like a userid. An alternative is to use a session variable that is matched to the user id on the server side and times out after a short while. That way even if someone does read the cookie from your client machine it is useless to them.

Breakfast at 2007-6-29 9:21:50 >