Re: cookies
| From: | Maris Kalnins | Date: | Thu, 04 Dec 2003 12:24:10 +0000 |
| Subject: | Re: cookies | ||
| References: | 1 2 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-31888@lists.php.net to get a copy of this message | ||
Right, but in my example HTML line
<img nocache border=0 width=2 height=1
src=http://www.cookiedomain.com/cookies/cookies.php>
isnt it refering and setting cookie for www.cookiedomain.com
even if this HTML file is on another domain?
Maris
"Richard Davey" <rich@launchcode.co.uk> wrote in message
news:115163711265.20031204104351@launchcode.co.uk...
> Hello Maris,
>
> Thursday, December 4, 2003, 10:40:33 AM, you wrote:
>
> MK> Could you share with your experience and point out where
> MK> is the problem here. I tried different variations for
> MK> domain parameter in setcookie command but it didnt help
>
> It's a security mechanism built into cookies. They cannot be
> cross-domain. They can cross sub-domains (i.e. *.launchcode.co.uk) but
> a cookie set for one domain cannot be read by another. Think of the
> anarchy that would happen if they could (being able to read and mess
> with say Hotmail cookies from your own site for example).
>
> --
> Best regards,
> Richard
> mailto:rich@launchcode.co.uk