Posted by Rik on 07/26/07 13:39

On Thu, 26 Jul 2007 15:35:43 +0200, vic <vic at showsec dot <"com>"> wrote:

>
> "Ian Hobson" <ian.hobson@ntlworld.com> wrote in message
> news:bFPpi.1838$h11.494@newsfe7-gui.ntli.net...
>> vic wrote:
>>> My website login sets session variables when successfully logging into
>>> the site and transfers control to a second page. However, when the
>>> new page starts up there are no session variables so control is
>>> returned to the login program. This is only failing on Vista Home
>>> machines IE7. It works conrectly on Vista Ultimate, FF and XP
>>> computers with IE7.
>>>
>>> What I see is the cookie with the SESSION ID is not being created on
>>> the failing machine so I assume a new session id is assigned. Cookies
>>> are allowed and I can set cookies and it works ok.
>>>
>>> How can I force the cookie SESSION ID to be created??
>>>
>> Hi Vic,
>>
>> I have found that disabling Norton to be very effective.
>>
>> Having proved that is the problem replace it with an anti-virus that
>> doesn't eat cookies.
>>
>> Regards
>>
>> Ian
>>
>
> Ian,
>
> It's not anti-virus eating cookies because as I said it works with
> firefox (cookie is there) but fails on 2 separate Vista Home machines
> (cookie is missing).


What's the exact Set-Cookie header? (Checking with LiveHTTPHeaders for FF
for instance?)

--
Rik Wasmus

[Back to original message]