RE: [PHP] R: [PHP] stupid crosscookie function
| From: | Jonathan Sharp | Date: | Sat, 16 Dec 2000 00:20:51 +0000 |
| Subject: | RE: [PHP] R: [PHP] stupid crosscookie function | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-30618@lists.php.net to get a copy of this message | ||
well first off http://site2.com?setcookie.php3
won't call setcookie.php3
unless your index.php file is set to execute the query string...
Could you please post the code for setcookie.php3
-sharpie!
-----Original Message-----
From: Delbono [mailto:delbono@dsc.it]
Sent: Friday, December 15, 2000 4:14 PM
To: Tim Zickus; Richard Lynch; php-general@lists.php.net
Subject: [PHP] R: [PHP] stupid crosscookie function
What what what?
>It's a security/privacy feature. You can get around it by having a
>third-party cookie server set a cookie that goes with an image (invisible
>1px by 1px if you want) and then having back-channel communications methods
>of sharing the data. This is how the weasely ad banner companies track you
>from site to site. :-)
I use images: but cannot grab the cookie from the image that points to the
other site.
Site 1
<body>
<img src="http://site2.com?setcookie.php3">
</body>
Cookie is set on site2, not site1
Can you be more specific please..
Thanks
>
>Browsers aren't supposed to accept image cookies from third-party domains,
>but they do anyway...it probably breaks a business model someplace to do
the
>right thing.
>
>- Tim
>
>----- Original Message -----
>From: "Richard Lynch" <richard@zend.com>
>To: <php-general@lists.php.net>
>Sent: Friday, December 15, 2000 5:01 PM
>Subject: Re: [PHP] stupid crosscookie function
>
>
>> I think maybe you can do it between different sub-domains (eg
>> www.domain1.com and www2.domain1.com) but not two different domains...
>>
>> This is just a theory based on my limited reading of the Cookie spec and
>its
>> intent...
>>
>> I don't really know.
>
>
>
>--
>PHP General Mailing List (http://www.php.net/)
>To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
>For additional commands, e-mail: php-general-help@lists.php.net
>To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
>
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net