cookies

Unique reference for a user without the use of cookies or javascript?

What I am looking for is way / design to track a user / site visitor without the need for cookies or JavaScript as about 5% of users have one or both of these turned off. What I would like to achieve is a unique reference for the user which can be captured server side in code. I was thinking machine CPU / Motherboard ID but this info...

how browser relates the cookies for web sites in each tab.

How does the browser relates the cookies for the websites opened in tabs.for example in firefox i have opened five tabs and in each tab i have loaded different sites. my question is how browser identifies which cookies for which site. what is the relationship it has. similarly if i open the same sites in another browser instance , will t...

Get the .ASPXAUTH cookie value programatically II

I am attempting to retrieve the ASPXAUTH cookie pro grammatically without success. A similar question posted to this forum did not prove helpful. My code is shown below. One known gotcha is to be sure to assign a CookieContainer to the request, which I have done. Additionally, I can run web application in the debugger and see that th...

Remote alternative to local storage for low-security user data?

Suppose you're developing an independent, small sub-page for a big and well frequented web portal. The sub-page shows entries from a public event calendar, and allows users to highlight those especially interesting to them. The highlighted events shall be highlighted (and maybe shown on a separate list) on each future visit of that user...

Cookie sharing between sites with the same top level domain

Hi guys, web newbie here, I'm sharing cookies between two sites of mine, myserver.com and other.myserver.com, by using in Django: SESSION_COOKIE_DOMAIN = '.myserver.com' This works in most cases, but when the first site is reached through an iframe like so: <iframe src="https://myserver.com/page?data=asdsafaf"&gt;&lt;/iframe&gt; ...

iPhone cookies to store username and password

Hi, I have no idea how to store username and password details so that the user does not have to login everytime for the iPhone app. Can anyone lead me in the right direction? I can't seem to find what to do. Thanks! ...

PHP create cookie and only show website if cookie exists

I want to protect a website from being accessed until a user has agreed to something. The basic idea is that at the top of each page it will check if the cookie exists if not then exit and include a php page that contains the message and two buttons one which will create the cookie and the other simply moving them off the site e.g. googl...

HTTPS Post Reuqest via PHP and Cookies

I am kinda new to PHP however I used JSP a lot before (I have quite information) and everything was easier with Java classes. So, now, I want to perform a POST request on a HTTPS page (not HTTP) and need to get returned cookies and past it to another GET request and return the final result. Aim is to make a heavy page for mobile phones ...

Issues with jquery cookie plugin?

I use jquerys cookie plugin, and I set a cookie on page 1 and when I come to page 2 the cookie is null. The pages are iframed and the javascript is in external files. What can the issue be? Any suggestions? ...

Using cookies with CURL

Hello fellow Overflows! I'm writing an "API" for a website which doesn't have it. Basically, my PHP code logs into the website and grabs the data I need (two different transfers). At login time, I'm getting a bit of a problem. The website sets a couple of cookies through HTTP, which I'm capturing using CURL's cookie mechanism. This se...

How to set up a secure PHP Session

In a similar vein to my previous question - I'm not a very experienced PHP Programmer. I know nothing about Sessions or Security (other that what I learnt an hour ago about md5 and sha1 with salt). I have a login system, and I wish to create a session that stores and encrypted string of a user's username mixed with a timestamp. I know ...

How does Facebook set Cookies with FB Init call in "Facebook Connect" setup?

Two part question: I have setup my website to use Facebook Connect for logging in. In the restricted area, I check if there is a cookie set with the name, "fbs_" under my domain name. However, I do not understand how this cookie gets set under my domain name. Does anyone know what happens with FB.Init call in this regard? (I have not us...

Best practise for remember me feature

I am using 2 variables in cookie(7 day expiration) which is user id and hash. Hash is sha1 encode of user agent and user id. In this case some hacker can login who is know stolen cookie's browser. Which way should i follow or which practise is best for remember me security problems ? ...

Detect spiders or browsers with cookies enabled

Lots of spiders/crawlers visit our news site. We depend on GeoIP services to identify our visitors' physical location and serve them related content. So we developed a module with module_init() function that sends IP to MaxMind and sets cookies with location information. To avoid sending requests on each page view, we first check wheth...

infinite jQuery cookie

Hey, I plan to use some music on my site, but before I make it autoplay for each visitor, I would like to have either an alert pop up immediately, asking if they would like the music to play, or a nice little tooltip of some sort to present a message stating that you can check whether or not you would like the music. So, I know I can s...

ASP.NET Roles cookie question

I have custom RoleProvider. I see that GetRolesForUser() getting called for each session even if the user auto-logged in via cookie. 99.99% of the users will have just one role 'USER' (app is public) and their roles won't change. So I want the roles to be cached in Roles cookie so that GetRolesForUser() not called for each session. I ...

Setting a cookie to prevent music from playing

OK, some I'm using jPlayer for some music on my site, and I have an opt out functionality that I would like to implement here, but I need a little help getting started. So, I've set a cookie: $.cookie('autoPlay', 'no', { expires: 365 * 10 }); So, I like to set up a conditional as follows: if(cookie == 0) { noMusic; } else { play...

Setting the cookie which works across HTTP and HTTPS, with www and without www

Hi, I have a website where I want to do transaction which has to be done over https, but the https works only without www (due to some issue while taking SSL certificate). http:/ /www.example.com https:/ /example. com I want to set the cookies which are accessible in above of two. Limitations: 1. https:/ /example. com can not made ...

iFrames + Google Analytics + Cookies + P3P = Rocket Science Mess I can't figure. Please help.

I am working on a website that generates traffic for partner sites. When a partner site's logo is clicked on our site we open the partner site in a page that contains our basic header and the partner site within an iframe. Earlier we were simply opening the partner site in new window. All cool so far. Most partner sites use google analy...

Check if third-party cookies are enabled

I have an application that needs to check whether the client browser has third-party-cookies enabled. Does anyone know how to do this in Javascript? ...