[eluser]jedd[/eluser]
[quote author="Devyn" date="1253240092"]
I have search on the Internet and most of them say we can encrypt the cookie but hacker can still access the data and change.
[/quote]
A lot of people on the Internet say a lot of things. Unsurprisingly, most of it is bollocks.
If you're really concerned, encrypt your data before you push it into your session - that way you'll have data that is encrypted by a mechanism that people can't break, twice.
What you could also do is send a copy of your encrypted cookie to one of those People On The Internet and ask them to find the contents. Offer them a million dollars if they can do it. Use a fake email address, just in case, and if they ever find you tell them the fine print of the deal clearly specified ZWD's.
Btw, just how sophisticated do you believe the kinds of people who play card games on facebook really are?
