Re: Cookies & https
| From: | Stut | Date: | Mon, 22 May 2006 12:01:42 +0000 |
| Subject: | Re: Cookies & https | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236620@lists.php.net to get a copy of this message | ||
Michael Satterwhite wrote:
I have a site that is using a shared ssl certificate. When running on the site, the host is of the form <host.com>. When running in ssl mode, the domain is of the form <host>.<certhost>.com. ping shows that both resolve to the same ip address. Is there a way to create a cookie in the unsecured area and have it available when going through the ssl certificate?Short answer: No Long answer: Noooooooooooooooooooooooooooo Seriously though, for security reasons you cannot set cookies from one domain for another domain. You'll need to come up with another way to pass a secure token or just leave them on the secure site. -Stut