Test one

gistfile1.pl

if (!defined($sec_cookie) || !defined($userid) || !exists($users{$userid}) ||
	!exists($users{$userid}{"secret_cookie"}) ||
	$sec_cookie ne $users{$userid}{"secret_cookie"} ||
	$users{$userid}{"secret_cookie"} == 0)
    {
	my $expected = "undef";
	$expected = $users{$userid}{"secret_cookie"} if (exists($users{$userid}{"secret_cookie"}));
	$sec_cookie = "undef" if (!defined($sec_cookie));
	$userid = "undef" if (!defined($userid));

	#Send imposter away. reply_send is used not to distrubt legimate user session
	&reply_send(0, $socket, 0, $jsonid, "DIE Security violation!");
	dprint(1, 0, "WWW: Mismatch: " . $expected .
	       " != $sec_cookie , userid: $userid");
	return;
    }