Two domains, one site, one SSL checkout. How to get cookies?

views:

answers:

+3 Q:

Two domains, one site, one SSL checkout. How to get cookies?

Hi, There is a multilingual web shop, visitors can access from two domains, with different language:
hxxp://x.com - English
hxxp://x.ru - Russian, which is an add-on domain to x.com.

The authentication and cart pages are here, through SSL: https://x.com/index.php?mode=login

How can I use the cookie informations of x.ru on hxxps://x.com? And is it ok to redirect the visitors of x.ru to hxxps://x.com for authentication, and after that, redirect back to x.ru?

thank you.

If you look any Google auth page it's redirect you to a SSL login page then returns to a simple http one. So i think this will be fine.

IMO you can store cookie informations in a database with a unique token then check this data against stored cookies/session variables.

fabrik 2010-07-29 12:38:28

Not a bad idea! Is this a better solution than passing all cookie informations through the URL?

Tsfed 2010-07-29 15:09:01

I think it's definitely better.

fabrik 2010-07-29 17:31:16

+1 A:

This cannot be done precisely as you want. x.com and x.ru are different sites; if they could share cookie data, x.ru and gmail.com could also. That would be bad.

See http://stackoverflow.com/questions/939268/cross-domain-cookie-access-or-session .

I believe you can set a third-party cookie for x.ru from x.com, but third-party cookies are often blocked by users' browers (for good reason).

Borealid 2010-07-29 12:42:37

x.ru is an addon domain, so there is only one real webshop and database. Just the language is different. I did some search for third-party cookies, and you are right, it is not the best choice.

Tsfed 2010-07-29 15:02:49

@Tsfed : if they're really the same site, why not make them share a domain? If you had foo.x.com and bar.x.com, you could set the cookie domain to 'x.com' and they could share.

Borealid 2010-07-29 15:25:49

I think it's more seo friendly to have different domains than different subdomains. Or not?

Tsfed 2010-07-29 18:16:08

@Tsfed No, you really don't want to contort your site structure based on search engine behavior. Bad idea.

Borealid 2010-07-29 18:21:18

What do you mean by contort the structure? The content and the structure would be the same an a subdomain too. Which have better value, two different subdomains or two domains?(Canon do not use subdomains: canon.de and canon.co.uk)

Tsfed 2010-07-29 18:48:09

ansaurus

tags:

views:

answers:

Two domains, one site, one SSL checkout. How to get cookies?

related questions