Re: URGENT ssl/cookie problem

From: R. Rajesh Jeba Anbiah (ng4rrjanbiah_at_rediffmail.com)
Date: 05/03/04


Date: 3 May 2004 00:22:44 -0700


"Spidah" <h.laughland@eggstra.co.nz> wrote in message news:<Ibogc.238$2%1.5329@news.xtra.co.nz>...
> I am working on a shopping cart for a client and have struck a weird
> problem.
>
> The client's ssl setup is on a different url to the main site. As a result
> we get two copies of our shopping cart session cookie generated - one under
> each url. I gather the script is creating separate sessions for each url.
>
> After the customer's payment approval/invoice is generated the cart is
> supposed to be cleared, but only one of the cookies is being emptied.
>
> How do I delete both session cookies from inside one url? Is this possible?

1. Cookies are not accessible between domains.
2. Sometimes ago, it was reported that PHP sessions are not persistent
between http and https pages of *same domain* (Is it your case?). And
the suggestion provided was to pass the session id across the pages
manugally. But, I never faced such problem. Probably you may look at
<http://groups.google.com/groups?q=php+session+https>

-- 
 http://www.sendmetoindia.com - Send Me to India!
Email: rrjanbiah-at-Y!com


Relevant Pages

  • Re: Reality Check: Session Hijacking
    ... The user is always challenged when he starts to use a secure app, ... And NOT from the session. ... rest of the http response, so he also has the required post data. ... > exposes his session cookie over unencrypted http. ...
    (comp.lang.php)
  • four or five shopping cart design questions
    ... I'm thinking about building a shopping cart from scratch, ... How does repeat customer session handling usually work? ... they have to supply name address and credit card number. ... the shoppingMode screens, do we NULL out the credit card in ...
    (comp.lang.php)
  • SessionID Still not working
    ... I have written a shopping cart using ASP .NET. ... The session ID is supposed to stay the same!!! ... IIS 6.0 W2K3 server and updated patches. ... that displays the sessionid on the top of the page, and it changes when I hit ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Where is SID?
    ... > and SID echoes as an empty string. ... server, and you'll see the session cookie being set, ... an appropriate session cookie. ...
    (comp.lang.php)
  • Session ID is changing
    ... I have written a shopping cart using ASP .NET. ... The session ID is supposed to stay the same!!! ... IIS 6.0 W2K3 server and updated patches. ...
    (microsoft.public.dotnet.framework.aspnet)