RE: [PHP] SetCookie weirdness

2001-06-20 Thread scott [gts]

along with domains, cookies respect directories.

for example:

i'd have a script in '/somewhere'
and another script in '/another'

and when they'd try to use the same cookies,
it wouldnt work...

i had to actually specify a path of '/' for
both of them to be able to use the same cookies.


> -Original Message-
> From: Ray Hilton [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, June 20, 2001 3:26 AM
> To: 'Tomaz Kovacic'; [EMAIL PROTECTED]
> Subject: RE: [PHP] SetCookie weirdness
>
>
> This is actually a security feature of cookies, so that domains that
> don’t match your cookie cannot read personal details set by another
> site.  Don't worry, its all in order ;)
>
> Ray Hilton
> -
> [EMAIL PROTECTED]
> http://rayh.co.uk
>
> -Original Message-
> From: Tomaz Kovacic [mailto:[EMAIL PROTECTED]]
> Sent: 19 June 2001 12:36
> To: [EMAIL PROTECTED]
> Subject: [PHP] SetCookie weirdness
>
>
> Hi!
>
> Last night I've found some interesting cookie behavior. I was testing
> some script on my local server, so I used short version of domain (
> http://www ) to reach local webserver. My script stopped working, so I
> started to investigate a little bit what's goin on..
>
> I've managed to get my script working only when i user SetCookie command
> with only 3 parameters:
>
> SetCookie ("mycookie", $cookie, time()+1200);
>
> My usual form of setting cookie is with all 6 arguments like:
> SetCookie("mycookie", $cookie, time()+1200, "/", ".domain.com", 0);
>
> But if I use longer form if domain: www.local (same as
> www.somedomaing.com) my longer form of  setting cookie started to work
> again.
>
> Weird.
>
> Anyone experianced similar problems?
>
> Tomaz
>
>
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




RE: [PHP] SetCookie weirdness

2001-06-20 Thread Ray Hilton

This is actually a security feature of cookies, so that domains that
don’t match your cookie cannot read personal details set by another
site.  Don't worry, its all in order ;)

Ray Hilton
-
[EMAIL PROTECTED]
http://rayh.co.uk

-Original Message-
From: Tomaz Kovacic [mailto:[EMAIL PROTECTED]]
Sent: 19 June 2001 12:36
To: [EMAIL PROTECTED]
Subject: [PHP] SetCookie weirdness


Hi!

Last night I've found some interesting cookie behavior. I was testing
some script on my local server, so I used short version of domain (
http://www ) to reach local webserver. My script stopped working, so I
started to investigate a little bit what's goin on..

I've managed to get my script working only when i user SetCookie command
with only 3 parameters:

SetCookie ("mycookie", $cookie, time()+1200);

My usual form of setting cookie is with all 6 arguments like:
SetCookie("mycookie", $cookie, time()+1200, "/", ".domain.com", 0);

But if I use longer form if domain: www.local (same as
www.somedomaing.com) my longer form of  setting cookie started to work
again.

Weird.

Anyone experianced similar problems?

Tomaz