cookies

Why does session cookie only show '.com' for the DOMAIN when viewed in IE8 ?

I am using the following code to set a session cookie HttpCookie cookie = new HttpCookie("visitId"); cookie.Value = value; cookie.Domain = ".example.com"; Response.Cookies.Set(cookie); This works fine, although I was surprised to see in IE8 when I hit F12 (developer tools) and then 'Cache > View Cookie...

is it possible to value store cookies in Flash or Flex?

In php setcookie function based to store it . but flash is it possible ?. if it is possible then how ?. Plz help ... because i want to store value ... ...

Is it possible to create cookies on client's machine on web service call?

I have a window application, it calls a web service to get information. One of the functionalities of the window application is to go to a web page. In this web page, it’s looking for cookies on the client machine, and logs them in if the cookies is valid. What I was trying to do is to create the same cookie on a web service call. ...

What's the significance of Oct 12 1999?

In the SignOut method of System.Web.Security.FormsAuthentication, the ASP.NET team chose to expire the FormsAuth cookie by setting the expiration date to "Oct 12 1999". HttpCookie cookie = new HttpCookie(FormsCookieName, str); cookie.HttpOnly = true; cookie.Path = _FormsCookiePath; cookie.Expires = new DateTime(0x7cf, 10, 12); What's ...

Check if the client accepts cookie in javascript?

Is there any way to check if the client accepts cookies only with javascript code? ...

How to read third party cookies works across different domains?

I know this question has been asked before, but many answers don't give clear samples with codes on how to do this using ASP.NET 2.0. A simple C# is preferred, but I can also accept VB.NET or F#. This third party cookies question is a sample of a self answered question with the same topic, but it didn't give any clues about reading/gett...

generate page with jquery cannot read cookie with flex

Hello, When I generate a page with jquery (by including a startup.js in a html page), i cannot acces a cookie through flex. startup.js function init_element() { $(document).ready(function(event){ $("#accountBarDiv").css("position", "absolute"); $("#accountBarDiv").css("left", "0px"); $("#accountBarDiv").css("background-color", "tr...

What information is OK to store in cookies?

When thinking about security and user experience, what information id OK, acceptable, or even a good idea to store in a cookie? EDIT: With the understanding that sensitive info, like user names, passwords, SSN, credit card numbers don't belong there, what does? ...

How To get Cookies from this strange Domain?

Hey guys, I have a problem. I have situation where domain in m_domainTable starts with "." (dot), how can I get cookies from this kinda domain ? I can't create Uri with for example http://.testdomain.com ...

Secure cookies and mixed https/http site usage.

Lots of sites appear to support https but don't use secure cookies. I want to make my site use secure cookies but to allow for some content to be accessed using http instead. A sensible way to do this appears to be to have a secure cookie for the real session, and a non-secure cookie which is just a flag to say if the user is logged in...

Why can't I use session_start() in my php script? It says headers are already sent.

Here are the first few lines of my page: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"&gt; <?php include_once "dblogin.php"; session_start(); $loggedIn = 0; if(isset($_SESSION["login"])) {$loggedIn = 1;} ?> I'm getting the following error: Cannot send session cookie - headers al...

is there any role of browser cookies for static html site ?

if yes then what we can do with cookies? ...

What's the reason for cookies mysteriously reappearing?

I'm developing a web application using a cookie to store session information. I've manually deleted the session cookies because I'm working on another part of the code where I don't want a login session. However, after a couple reloads of the page, the session cookie mysteriously reappears, including an earlier cookie that I had only set...

Are there any viable alternatives to "classic" cookie authentication?

Is there any way (apart from HTTP authentication, which I gather is inherently insecure over the Internet?) for a "real life" website to handle logins and authentication rather than the traditional way, using session cookies? ...

User authentication without Session state in ASP.NET

One of the requirements proposed for an ASP.NET application is that we have Session state disabled globally. (This is not negotiable.) Another requirement is that we have some means for user authentication. I'm thinking of using ASP.NET's membership provider model. Is it possible to have user authentication without Session State? The ...

How do I save an array of data in a cookie with Symfony?

First off, I'm not all that familiar with cookies but I know how they work. I've seen quite a few different tutorials with plain PHP code but I'm looking for a solid example of how to store arrays in a cookie using the symfony syntax: $this->getResponse()->setCookie('myCookie', $data); You can't just pass in an array since it expects ...

Best practice for managing anonymous users' data

I'm looking for any hints on recommended, or simply tried and tested, ways of associating data with an anonymous user in a web application. I want the data to be available to users across multiple sessions, so therefore store it in the database. Obviously I will need some kind of cookie to identify that user, what I'm particularly inter...

Android MediaPlayer URL's with Cookie

I have an android application that plays music from a site, however to authenticate to the stream, you need to send a cookie first I.E: http://example.com/site/content?id=SOMEID = mp3 formatted stream If you access the url without a cookie, you'll get a Server 500 error. If you have a cookie, then you'll get the stream. For the life o...

How do sites support http (non-SSLed) sessions securely?

I note that some sites (such as gmail) allow the user to authenticate over https and then switch to http with non-secure cookies for the main use of the site. How is it possible to have http access to a session but this still be secure? Or is it not secure and hence this is why gmail gives the option to have the entire session secured ...

Cookies are always expired

Hi, I am setting a cookie with: HttpCookie cookie = new HttpCookie("simpleorder"); cookie.Expires = DateTime.Now.AddYears(1); cookie["order"] = carModel.ToString(); cookie["price"] = price.ToString(); Response.Cookies.Add(cookie); But when I check it a few seconds later it is expired and the expiration date is set to {01-01-0001 00:00...