cookies

How can i access cookie by flex?

I made a blog widget in flex. I need manipulate cookie in my widget which is added to my user's blog. But under some circumstance, some blog hosts forbid accessing to javascript, so i can not access cookie in flex by externalInterface. Does anyone know how to access cookie in this context? thanks. ...

PHP session_set_cookie_params

Hi I am intersted in learning more about the SECURE parameter of the function session_set_cookie_params can you tell me how to utilize this properly? if this function is executed on a page that is not secure (but on a server that does have SSL) will it somehow send it securely or do I have to force SSL on the page this function is execu...

Is There a Way to Version an HTTP Cookie?

Is it possible to provide version information to go with an HTTP cookie? I have a cookie which tells the page whether or not to prompt a user for action, based on whether or not the user wants the prompt. On a version upgrade of the page, I need to prompt the user regardless. Can I integrate this into my existing cookie? ...

Can someone explain these JavaScript cookie-functions?

I am new to javascript and I came across these functions which, I believe, are for storing a cookie with a name in it (the name being 'value'). I just don't understand it! The functions are as follows: Making the cookie function setCookie(c_name, value, expiredays) { var exdate=new Date(); exdate.setDate(exdate.getDate()+expiredays); d...

iPhone cookie/caching issue on 3G, fine over wifi

I'm having trouble with an old pre-mobile website which uses PHP, MySQL, cookies and HTML forms to log users in, and then track their session (it's a calendar app and messageboard). When my iPhone is attached to my wifi network at home, all is well, but when I switch to 3G the cookies no longer function and the session is dropped. I rea...

Intercepting download in webview and downloading using HttpClient

Hi, I have created a WebView instead of directly linking to a link because the website has complicated redirect checks that prevent me from directly linking. However, in order for the download to complete, users have to long click on the link and save it. Users are confused. They think its broken. I was wondering if it would be possible...

What is keeping the users logged in after cookies are cleared in IE?

I'm having an issue where even after deleting the users cookies they are still logged in to my ASP.NET MVC site (IIS 6). HOWEVER, this only happens on my clients machine, my IE 8 on Win7 does NOT have this issue and the normal log out method works fine. It seems they need to close out the browser before it will release them from being ab...

Tomcat application creates new session on page reload when visited through apache

We have a tomcat application which works fine in IE7/8 and Firefox. The only browser we are having issues with (that we care about at this point) is google Chrome. Users can navigate to the application fine and log in and do whatever they need to do in Firefox and IE. However, when trying to log in with Chrome, the session is apparently ...

Permanent cookies

I am trying to re-create the functionality seen on 43things.com, where you enter a text and it gets added to the list below and also brings up "123 people want to do this". This entry seems to be permanently stored when you are visiting the site from your machine. I am just wondering how this works? Is it just a cookie placed on the use...

Does 'separate domain sandboxing' (protecting from JS cookie hijacking) still work with a subdomain?

I think the title says it all, prettymuch. A little further detail: I'm running a site where users can submit Javascript freely Other people will preview this Javascript 'live' There will be basic measures in place to stop naughties like eval(), but inevitably some may unfortunately slip through The site is mysite.com, I gather runnin...

iPhone web app, not storing cookie

Hi Guys, I am working on a web app for the iOS. When the app is opened, it check's to see if the user has a cookie with the users email stored in it, then either lets the user proceed to the homepage, or redirects the user to the authentication page. This works perfectly when using safari. The problem I am experiencing occurs only whe...

Is secure to store user data like logged status and id in cookies?

The question says pretty much everything. My point is, is the user able to change his cookie's values in order to appear "logged", when he's not really logged? ...

null $_POST variables if 3rd party cookies blocked on FF & Chrome

Hi, I'm trying to build a site that does not rely on the user enabling 3rd party cookies. For some reason, I'm noticing null $_POST variables from a simple only in Firefox and Chrome when 3rd party cookies are blocked (IE is fine). This is only with POST. The GET variables from the same script store the data normally. I have set IE ...

cookie in default not secure but secure in SSL

I have a GUI when i log in i create a cookie and it encrypt it. I am usin SSL. I check in the Login.aspx page if the cookie is secure, which it is. but then before going to the default page it goes to the Global.ascx page. Here in the Application_AuthenticateRequest it gets the cookie and decrypts it for the default page.. Now i kno...

Security wise how do i use GUID properly?

I read an answer about guid and it was fairly interesting. It seems that GUID is based on time and v1 uses a MAC address with v4 using a RNG. From the wiki Cryptanalysis of the WinAPI GUID generator shows that, since the sequence of V4 GUIDs is pseudo-random; given full knowledge of the internal state, it is possible to pre...

Missing cookie in IE 6, 7,and 8

I'm sending 2 cookies to the browser. One is a browser identifier which expires in 1 year, and the other is a session tracker without an expiration. The response headers for a fresh request look like this HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-XSS-Protection: 0 ETag: "b502a27282a5c621f34d522c3fcc8e3e" Set-Cookie: bid=a...

Problem removing cookie in servlet

I trying to remove a cookie in a servlet with this code Cookie minIdCookie = null; for (Cookie c : req.getCookies()) { if (c.getName().equals("iPlanetDirectoryPro")) { minIdCookie = c; break; } } if (minIdCookie != null) { minIdCookie.setMaxAge(0); minIdCookie.setValue(""); minIdCookie.setPath("/");...

How are cookies passed in the HTTP protocol?

How are cookies passed in the HTTP protocol? ...

Access cookies || localSorage from content script - Chrome extension

Hi. Is there any way to access cookies || localSorage from content script? for example i have localStorage.shBox='true' and I want to access this from content script.. how can I make this? ...

FormsAuthentication.SetAuthCookie() sets authentication cookie for one login, but not another

In my web.config file, I have the following line: <authentication mode="Forms"> <forms timeout="25000000"/> </authentication> If I login to here SpectrumBridge and check the remember me checkbox, it puts a cookie on the local machine that expires in 50+ years. However, if I login to here UDIA, it sets an a cookie that says it wil...