As far as I can see, these are all the cookies set in REGmon:
session cookies (no expire date)
- authenticate.php: UID, ACCOUNT, USERNAME, HASH, DASHBOARD, DASH_ON_LOGIN
- logout.php: UID, ACCOUNT, USERNAME, HASH, ATHLETE
permanent cookies (2 years)
-> "ATHLETE" is set only on logout-page and not on authentication. Does it even have any meaning? Please remove, if there is no use for this cookie.
-> "DASHBOARD" and "DASH_ON_LOGIN" is not removed on logout, is this intended? I think they should be removed as well - if you agree, please remove when session ends.
As far as I can see, these are all the cookies set in REGmon:
session cookies (no expire date)
permanent cookies (2 years)
-> "ATHLETE" is set only on logout-page and not on authentication. Does it even have any meaning? Please remove, if there is no use for this cookie.
-> "DASHBOARD" and "DASH_ON_LOGIN" is not removed on logout, is this intended? I think they should be removed as well - if you agree, please remove when session ends.