I would like to test cookie poisoning so I want to edit one of my projects. There, I would like to write cookies which will contain subtotal of products and the checkout page will use it again to show the subtotal. I am not sure whether my thinking is correct or not and also my cookies are not working.first, i put these codes under addcart button method\[code\]Dim aCookie As New HttpCookie("SubTotal") aCookie.Value = http://stackoverflow.com/questions/14440571/objShopCart.ComputeSubTotal().ToString() aCookie.Expires = DateTime.Now.AddDays(1) HttpContext.Current.Response.Cookies.Add(aCookie)\[/code\]And in the checkout page,\[code\]If (Request.Cookies("aCookie") IsNot Nothing) Then Dim subTotal As String If (Request.Cookies("aCookie")("SubTotal") IsNot Nothing) Then subTotal = Request.Cookies("aCookie")("SubTotal") lblSubTotal.Text = subTotal End If End If\[/code\]According to the above codes, I cannot read the cookies. The Request.Cookies("aCookie") is always nothing I don't know why. And for the cookie poisoning demo is I intend to intercept the cookie of when I put things into the shopcart and edit it so when I got to checkout page, its shown with wrong info of subtotal etc. Appreciate to any help.