Session Cookie

A cookie is an HTTP mechanism that enables an HTTP server to store limited amounts of data in an HTTP client. This data can then be sent back to the server for requests based on specific criteria.

There are two types of cookie: persistent cookies , which are usually saved on the hard disk of the client until an expiry date and session cookies , which are not saved in the file system; they are kept only in the memory of the client (for example, the Web browser) until this is closed.

As such, session cookies involve no security risks and are deleted immediately the browser window is closed. Some browsers now differentiate between these two cookie types and, if required, only inform the user when persistent cookies are received, which require the user's confirmation.

The next version of the SAP Web Application Server will also support applications with no cookies at all.