This is a throwaway test page for the WinHTTrack crawler. It is not a real account and it protects nothing. Do not use these credentials anywhere else.
User whtt-tester · password fixture-pw-2026
A form login on one host. Sign in and you are sent to the protected area, which
carries the marker LOGIN-OK basic.
This login sets three cookies, all on path /tests/login/:
| Cookie | Attributes | Why it is here |
|---|---|---|
whtt_session | HttpOnly, no Expires | Unreadable from script, so harvesting it proves the browser cookie store was read. |
whtt_persistent | Expires in one year | A real expiry, next to a session one. |
whtt_awkward | value "a=1, b=2" |
A comma and an equals sign inside a quoted value, which must survive the file writer. |
Access to the protected area is gated on whtt_session alone, so a harvest
that drops HttpOnly cookies fails here rather than passing quietly.
Protected area · Clear the cookies
| Cookie | Received | Value as sent back |
|---|---|---|
whtt_session | no | — |
whtt_persistent | no | — |
whtt_awkward | no | — |
whtt_bare | no | — |
whtt_www | no | — |
whtt_js | no | — |