Our site was hit by a ddos attack, and some rejected cookies were sent. We use the CodeIgniter structure. Since it is not practical to ask our users to clear their cookies, I was wondering what would have consequences for changing the next function in the kernel. The cookies that create the error take the form:
__utmt_~1
Original function:
if ( ! preg_match("/^[a-z0-9:_\/-]+$/i", $str))
{
exit('Disallowed Key Characters.');
}
What are the possible side effects if I change it to allow ~? I know that here to prevent malicious users, and I want to make sure that this will not have undesirable consequences.
if ( ! preg_match("/^[a-z0-9:_\/-\~]+$/i", $str))
{
exit('Disallowed Key Characters.');
}
source
share