Posted by Ike on 02/01/07 00:45

I have a username/sid pair for typical authentication. That is, for someone
signing in under a given username, a sid is created, saved in both a cookie
and the db on the server. This I am doing as follows:

$timer = md5(time());
$sid = $UserID . "+" . $timer. "+" . $country;
SetCookie("ggcookie", $sid, time() + 86400 * 10000); //Set Cookie
for 10000 days
$query = "update associates set sid=\"$timer\" where
username=\"$UserID\"";

Thus, when another page is called, I immediately retrieve the value of the
cookie as follows:

if (!(isset($ggcookie))) {
echo "cookie not set in browser.";
exit;
}
$sidarray = explode("+", "$ggcookie");

However, for one particular user I have, upon upgrading to MSIE 7, this no
longer works as whenever he calls up a new page, he gets "cookie not set in
browser". In looking at his security settings his Zone is "Internet," set to
"Medium High" and his privacy policy is set to "Medium" (see below). I have
duplicated these settings on my machine and am able to get and parse the
cookie without any problem. I am wondering what may have changes with MSIE
7, or something I am missing, that is throwing this entire procedure for
this particular user? Any ideas are greatly appreciated. -Ike

"Medium" privacy settings call for
-blocks third party cookies that do not have a privacy policy
-blocks third party cookies that save information that can be used to
contact you without your explicit consent
-restricts first-party cookies that save information that can be used to
contact you without your explicit consent
(note, these are the same settings as on my machine which is working fine)

[Back to original message]