Hello, > I read the sections pertaining to cookies, and monitored what's going on > (with the debug on). It seems a session is being established correctly > (same cookie being sent as was accepted). my cookie for domain > www.blah.comhas a path of '/somePath'. Question...when I come to post > my form, the > target for my form is '/someOtherPath', so the cookie is never sent...is > this a problem? but it seems to work fine, as i get a redirect location > (which i don't get if i put in incorrect username/password..so i'm thinking > the cookies are working as expected)..but then when i try to follow the > redirect is when it gives me an error. I don't see anything wrong with the > debug statements. Are there any common gotchas when it comes to > redirects/cookies/etc? Thanks in advance!!
Have you checked the Referer: header? It's also useful to take a trace of a browser session for comparison. A network-level tool for that purpose is wireshark (formerly ethereal). hope that helps, Roland
smime.p7s
Description: S/MIME Cryptographic Signature
