. */ $id = $_POST['id']; $uuid = $_POST['uuid']; $token = $_POST['token']; $bookPath = $_POST['bookPath']; // XXX sanitize incoming params! setcookie('br-loan-' . $id, $uuid, 0, '/', '.archive.org'); setcookie('loan-' . $id, $token, 0, '/', '.archive.org'); header('Location: ' . $bookPath); ?>