note 68127 deleted from function.setcookie by bjori
| From: | bjori@php.net | Date: | Mon, 08 Jan 2007 10:52:07 +0000 |
| Subject: | note 68127 deleted from function.setcookie by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-121437@lists.php.net to get a copy of this message | ||
Note Submitter: kael dot shipman at DONTSPAMIT! dot gmail dot com
----
As I've interpreted it, only the cookies with a path set to the server name to which the
request was made are available to the PHP superglobal $_COOKIE. If all were available, you'd
probably have a huge security hole. Therefore, if you have a cookie on your computer set by
www.cha.com, and you then visit www.fah.com, www.fah.com cannot see that your www.cha.com cookie
exists (at least through the PHP $_COOKIE superglobal).
I've tested this in Safari and Firefox on Mac. I can't imagine that it would be any
different on other browsers, as I thought that was specifically what the path parameters were for.