I think what you&#39;re looking for is the [CookieContainer][1] class. If I understand what you&#39;re trying to do correctly, you have separate objects for request &amp; response, and you want to transfer the *response* cookie collection into the next *request* cookie collection automatically. Try using this code:

    CookieContainer cookieJar = new CookieContainer();
    HttpWebRequest request = (HttpWebRequest)HttpWebRequest.Create(&quot;http://www.google.com&quot;);
    request.CookieContainer = cookieJar;

    HttpWebResponse response = (HttpWebResponse)request.GetResponse();
    int cookieCount = cookieJar.Count;

Once you create a `cookieJar` and set it to the request&#39;s CookieContainer, it will store any cookies that come from the response, so in the example above, the cookie jar&#39;s count will be `1` once it visits Google.com. The cookie container properties of the request &amp; response above will store a pointer to the cookieJar, so the cookies are automatically handled and shared between the objects.

  [1]: http://msdn.microsoft.com/en-us/library/system.net.cookiecontainer.aspx

I&#39;m a recent git convert. It&#39;s great to be able to use git-svn to keep my branches locally without disturbing the svn server. There was a bug that existed in the latest version of the code. I wanted to establish a time when it worked so that I could use git bisect. I couldn&#39;t find the right command to move back in time. Thanks.

What&#39;s the git equivalent of &quot;svn update -r&quot;?

We write a software that create PDF files. How we can check if the resulting pdf files are PDF/A compatible? Are there any test suite for it available?

How can I test a PDF document if it is PDF/A compliant?

Is there any way to automatically handle cookies in .NET with the HttpWebRequest/HttpWebResponse objects? I&#39;m preferably looking for an equivalent to LWP::UserAgent and its behaviour (perl), only in a .NET environment.

Any suggestions or advice? 



Automatic Cookie Handling C#/.NET HttpWebRequest+HttpWebResponse

<p>Is there any way to automatically handle cookies in .NET with the HttpWebRequest/HttpWebResponse objects? I'm preferably looking for an equivalent to LWP::UserAgent and its behaviour (perl), only in a .NET environment.</p>
<p>Any suggestions or advice?</p>


I played around with it for a while, but I simply can&#39;t figure it out.

I made a tank that fires missiles, and when the missiles hit the walls, I want them to bounce off, but I want them to bounce off to the right angle.

Right now I haven&#39;t got any obstacles, the missiles just bounce off when they get outside the `viewportRectangle` I made.

Is the solution I&#39;m looking for quite advanced?

Is there a relativly simple way to do it?


How to calculate bounce angle?

This question applies to Windows Vista!

I have an application which normally works without administrative privileges. There is one activity which does need administrative privilege but I don&#39;t want to start the application itself with higher privileges when I know most of time user wont even be using that feature.

I am thinking about certain method by which I can elevate the privileges of application on some event (such as press of a button). Example:

![][1]

If user clicks this button then he is prompted with UAC dialog or consent. How can I do this?


  [1]: https://i.stack.imgur.com/7wMTs.jpg

How to elevate privileges only when required?

I like instantiating my WCF service clients within a `using` block as it&#39;s pretty much the standard way to use resources that implement `IDisposable`:

    using (var client = new SomeWCFServiceClient()) 
    {
        //Do something with the client 
    }

But, as noted in [this MSDN article][1], wrapping a WCF client in a `using` block could mask any errors that result in the client being left in a faulted state (like a timeout or communication problem). Long story short, when `Dispose()` is called, the client&#39;s `Close()` method fires, but throws an error because it&#39;s in a faulted state. The original exception is then masked by the second exception. Not good.

The suggested workaround in the MSDN article is to completely avoid using a `using` block, and to instead instantiate your clients and use them something like this:

    try
    {
        ...
        client.Close();
    }
    catch (CommunicationException e)
    {
        ...
        client.Abort();
    }
    catch (TimeoutException e)
    {
        ...
        client.Abort();
    }
    catch (Exception e)
    {
        ...
        client.Abort();
        throw;
    }

Compared to the `using` block, I think that&#39;s ugly. And a lot of code to write each time you need a client.

Luckily, I found a few other workarounds, such as this one on the (now defunct) IServiceOriented blog. You start with:

    public delegate void UseServiceDelegate&lt;T&gt;(T proxy); 
    
    public static class Service&lt;T&gt; 
    { 
        public static ChannelFactory&lt;T&gt; _channelFactory = new ChannelFactory&lt;T&gt;(&quot;&quot;); 
        
        public static void Use(UseServiceDelegate&lt;T&gt; codeBlock) 
        { 
            IClientChannel proxy = (IClientChannel)_channelFactory.CreateChannel(); 
            bool success = false; 
            try 
            { 
                codeBlock((T)proxy); 
                proxy.Close(); 
                success = true; 
            } 
            finally 
            { 
                if (!success) 
                { 
                    proxy.Abort(); 
                } 
            } 
         } 
    } 

Which then allows:

    Service&lt;IOrderService&gt;.Use(orderService =&gt; 
    { 
        orderService.PlaceOrder(request); 
    }); 

That&#39;s not bad, but I don&#39;t think it&#39;s as expressive and easily understandable as the `using` block.

The workaround I&#39;m currently trying to use I first read about on [blog.davidbarret.net][2]. Basically, you override the client&#39;s `Dispose()` method wherever you use it. Something like:

    public partial class SomeWCFServiceClient : IDisposable
    {
        void IDisposable.Dispose() 
        {
            if (this.State == CommunicationState.Faulted) 
            {
                this.Abort();
            } 
            else 
            {
                this.Close();
            }
        }
    }

This appears to be able to allow the `using` block again without the danger of masking a faulted state exception. 

So, are there any other gotchas I have to look out for using these workarounds? Has anybody come up with anything better?


  [1]: http://msdn.microsoft.com/en-us/library/aa355056.aspx
  [2]: http://blog.davidbarrett.net/archive/2007/11.aspx

What is the best workaround for the WCF client `using` block issue?

Do I use response when at a page event (e.g. load) as this is a response from ASP.NET, and request when pressing a button as this is a response going to ASP.NET for processing? Or is there more to it?

When to use Request.Cookies over Response.Cookies?

I am fascinated by the way the CLR and GC works (I&#39;m working on expanding my knowledge on this by reading CLR via C#, Jon Skeet&#39;s books/posts, and more).

Anyway, what is the difference between saying:

    MyClass myclass = new MyClass();
    myclass = null;

Or, by making MyClass implement IDisposable and a destructor and calling Dispose()?

Also, if I have a code block with a using statement (eg below), if I step through the code and exit the using block, is the object disposed of then or when a garbage collection occurs? What would happen if I call Dispose() in the using block anyay?

    using (MyDisposableObj mydispobj = new MyDisposableObj())
    {
    
    }

Stream classes (eg BinaryWriter) have a Finalize method? Why would I want to use that?


Setting an object to null vs Dispose()

When I try to start a service I created in Visual Studio I receive the following error:

    System error 5 has occurred.
    
    Access is denied.

I am running the command line with elevated privileges, so it&#39;s not that problem. Is there any place I can look to see what error is occuring.

System error 5 Access is denied when starting a .NET service

What is an [AppDomain][1]? What are the benefits of AppDomains or why 
Microsoft brought the concept of AppDomains, what was the problem without AppDomains?

Please elaborate.

  [1]: http://en.wikipedia.org/wiki/Application_Domain


What is AppDomain?

What is the recommended way of formatting `TimeSpan` objects into  a string with a custom format?

How can I String.Format a TimeSpan object with a custom format in .NET?

Let say I have a website with domain: www.example.com

If I set a cookie with path &#39;***/***&#39; the cookie will be accessible via all pages in the domain, eg:

 - www.example.com/page1.html
 - www.example.com/subfolder1/page1.html
 - www.example.com/subfolder1/moresubfolder1/page1.html, etc.

What if we set the cookie to path &#39;***/subfolder1***&#39;, will the cookie will be made available to any page or subfolder beneath the folder? Eg:

 - www.example.com/subfolder1/moresubfolder/page1.html


So, if not, I guess, I have no choice but to use path &#39;/&#39; for those cookies, right?


Cookie path and its accessibility to subfolder pages

I have written code to save cookies in JavaScript. Now I need to clear the cookies irrespective of values that I assigned.

Are there any script modules to delete all cookies that were generated by [Javascript][1]?

### My Sample Code:

    document.cookie = &#39;ppkcookie2=another test; expires=Fri, 3 Aug 2001 20:47:11 UTC; path=/&#39;

    function createCookie(name,value,days) {
        if (days) {
            var date = new Date();
            date.setTime(date.getTime()+(days*24*60*60*1000));
            var expires = &quot;; expires=&quot;+date.toGMTString();
        }
        else var expires = &quot;&quot;;
        document.cookie = name+&quot;=&quot;+value+expires+&quot;; path=/&quot;;
    }

    function readCookie(name) {
        var nameEQ = name + &quot;=&quot;;
        var ca = document.cookie.split(&#39;;&#39;);
        for(var i=0;i &lt; ca.length;i++) {
            var c = ca[i];
            while (c.charAt(0)==&#39; &#39;) c = c.substring(1,c.length);
            if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length,c.length);
        }
        return null;
    }

    function eraseCookie(name) {
        createCookie(name,&quot;&quot;,-1);
    }

How else could I clear all of the cookies?

Will there will be any problems when I test the code on the webserver?

  [1]: http://en.wikipedia.org/wiki/JavaScript


How can I delete all cookies with JavaScript?




&gt; Since this question is rather popular, I thought it useful to give it an update.
&gt; 
&gt; Let me emphasise **the correct answer** as given by [AviD](https://security.stackexchange.com/users/33/avid) to this question:
&gt; &lt;br&gt;
&gt;
&gt;**You should not store any data that needs encrypting in your cookie.** Instead, store a good sized (128 bits/16 bytes) random key in the cookie and store the information you want to keep secure on the server, identified by the cookie&#39;s key.

&lt;br&gt;

&lt;hr&gt;

I&#39;m looking for information about &#39;the best&#39; encryption algorithm for encrypting cookies.

I hava the following requirements:

* It must be fast  
  encrypting and decrypting the data will be done for (nearly) every request

* It will operate on small data sets, typically strings of around 100 character or less

* It must be secure, but it&#39;s not like we&#39;re securing banking transactions

* We need to be able to decrypt the information so SHA1 and the like are out.

Now I&#39;ve read that Blowfish is fast and secure, and I&#39;ve read that AES is fast and secure.
With Blowfish having a smaller block size. 

I think that both algorithms provide more than adequate security? so the speed would then become the decisive factor.
But I really have no idea if those algorithm are suited for small character string and if there are maybe better suited algorithm for encrypting cookies.

**So my question is:**  
What encryption algorithm is best for encrypting cookie data?

**Update**  
To be more precise, we want to encrypt 2 cookie: one with session information and the other with &#39;remeber me&#39; information.

The platform is PHP as apache module on Linux on a VPS.

**Update 2**  
I agree with [cletus](https://stackoverflow.com/users/18393/cletus) that storing any information in a cookie is insecure.

However, we have a requirement to implement a &#39;remeber me&#39; feature. The accepted way to go about this is by setting a cookie. If the client presents this cookie, he or she is allowed access the system with (almost) equal rights as if he/she presented the valid username password combination.

So we at least want to encrypt all data in the cookie so that it:  
**a)** malicious users can&#39;t read it&#39;s contents,  
**b)** malicious users can&#39;t fabricate their own cookie or tamper with it.

(All data from cookies is sanitized and checked for validity before we do anything with it, but that&#39;s another story)

The session cookie contains a sessionId/timestamp nothing more. It could probably be used without encryption, but I see no harm in encrypting it? (other than computation time).

*So given that we have to store some data on in a cookie, what is the best way to encrypt it?*

**Update 3**  
The responses to this question made me reconsider the chosen approach. I can indeed do the same without the need for encryption. Instead of encrypting the data, I should only send out data that is meaningless without it&#39;s context *and cannot be guessed*.

*However, I&#39;m also at a loss:*  
I thought that encryption enabled us send data out in to the BigBadWorld&amp;trade;, and still be (fairly) sure that nobody could read or tamper with the it...  
Wasn&#39;t that the whole point of encryption?  

But the reactions below push toward: Do not trust encryption to accomplish security. 

*What am I missing??*


What encryption algorithm is best for encrypting cookies?

What is the maximum size of a web browser&#39;s cookie&#39;s key?

I know the maximum size of a cookie is 4KB, but does the key have a limitation as well?

What is the maximum size of a web browser&#39;s cookie&#39;s key?

I use php sessions (not cookies, except for session id cookie) for all user data, and when a user goes to their profile user.mydomain.com they are immediately &quot;logged out&quot; untill then remove the subdomain.

Is there a way to accept sessions from all domains as long as its *.mydomain.com

Content Type	Original Author	Original Content on Stackoverflow
Question	user69197	View Question on Stackoverflow
Solution 1 - C#	Dan Herbert	View Answer on Stackoverflow

Automatic Cookie Handling C#/.NET HttpWebRequest+HttpWebResponse

C# Problem Overview

C# Solutions

Solution 1 - C#

How can I test a PDF document if it is PDF/A compliant?

What's the git equivalent of "svn update -r"?

Attributions