Re: Cookies & https

From: Date: Mon, 22 May 2006 12:01:42 +0000
Subject: Re: Cookies & https
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-236620@lists.php.net to get a copy of this message
Michael Satterwhite wrote:
I have a site that is using a shared ssl certificate. When running on the site, the host is of the form <host.com>. When running in ssl mode, the domain is of the form <host>.<certhost>.com. ping shows that both resolve to the same ip address. Is there a way to create a cookie in the unsecured area and have it available when going through the ssl certificate?
Short answer: No Long answer: Noooooooooooooooooooooooooooo Seriously though, for security reasons you cannot set cookies from one domain for another domain. You'll need to come up with another way to pass a secure token or just leave them on the secure site. -Stut

« previous php.general (#236620) next »