Posted by "n.g." on 11/23/05 06:01

did i say it? sorry, i mean load the page in your customer browser.

the code you give simple test stored cookie, which might be blocked by
browser. however browser blocks stored cookie might allow session
cookie, they are not stored so are less insecurity.

bad thing is your customer have some antivirus/firewall software
installed you even cant rely on http referer header, as well as
cookies.

and you have to do something before you can find out what is
happening, isn't it ?

On 11/22/05, n.g. <nyvsld@gmail.com> wrote:
> save below as testcookie.php, request it from your browser twice, what
> do you get at 2nd time?
> <?php
> setcookie('sessioncookie', 1);
> setcookie('storedcookie',1,time()+3600);
>
> var_dump($_COOKIE);
> ?>
>
> On 11/22/05, Kristen G. Thorson <kthorson@allegroconsultants.com> wrote:
> > Anyone have any suggestions? I'm still stuck.
> >
> >
> > thanks,
> > kgt
> >
> >
> >
> > Kristen G. Thorson wrote:
> >
> > > I'm having problems with a customer who can't login to a wholesaler
> > > application. To ensure the problem was that the cookie was not being
> > > set, I sent him to this script:
> > >
> > > if( !isset( $_REQUEST['page'] ) ) {
> > > setcookie('VATtest','Cookie has been set.',time()+50000, "/");
> > > echo '<a href="'.$_SERVER['PHP_SELF'].'?page=1">Test cookie.</a>';
> > > } else if( $_REQUEST['page'] == '1' ) {
> > > if( isset( $_COOKIE['VATtest'] ) ) {
> > > echo $_COOKIE['VATtest'];
> > > } else {
> > > echo 'Cookie NOT set.';
> > > }
> > > }
> > > ?>
> > >
> > >
> > > He got "Cookie NOT set." which means exactly what it says. He's using
> > > IE 6.0, and swears up and down that he's set it to always allow
> > > cookies from this domain. I can't verify that he's set it correctly,
> > > but he has been told twice how to do it. I also know his browser must
> > > be saving some cookies, as he is able to login to other sites. Has
> > > anyone run into other sources of cookie-blockage in the past? I
> > > cannot manage to duplicate this when I have IE set to always allow
> > > cookies from this domain.
> > >
> > > Thanks for any tips,
> > >
> > > kgt
> > >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
>
>
> --
> Tomorrow will be a good day :-)
>


--
Tomorrow will be a good day :-)

[Back to original message]