Re: Cookies & https

On 5/22/06, Michael Satterwhite <michael@weblore.com> wrote:

I have a site that is using a shared ssl certificate. When running on the site, the host is of the form <host.com>. When running in ssl mode, the domain is of the form <host>.<certhost>.com. ping shows that both resolve to the same ip address. Is there a way to create a cookie in the unsecured area and have it available when going through the ssl certificate?

Nope. They are different domains. If they were on the same basic domain, you could (see http://wp.netscape.com/newsref/std/cookie_spec.html specifically the "domain" section) but completely different domains isn't an option. PHP sessions would work though. Explicitly pass the session across and it should work (well, I think!). -- Postgresql & php tutorials http://www.designmagick.com/