Wednesday, April 15, 2009

Cookies Testing

Cookies are often used to store information about the user and his actions on a particular site. When a user accesses a site that uses cookies, the web server sends information about the user and stores it on the client computer in form of a cookie.

These can be used to create more dynamic and custom-made pages or by storing, for example, login info.If you have designed your site to use cookies, they need to be checked. Verify that the information that is to be retrieved is there.

If login information is stored in cookies check for correct encryption of these. If your application requires cookies, how does it respond to users that disabled the use of such? Does it still function or will the user get notified of the current situation.

How will temporary cookies be handled? What will happen when cookies expire? Depending on what cookies are used for, one should examine the possibilities for other solutions.

Important tips:

1. Encryption of e.g. login info
2. Users denying or accepting
3. Temporary and expired cookies