note 51195 deleted from function.setcookie by danbrown
| From: | danbrown@php.net | Date: | Sun, 17 May 2009 18:00:17 +0000 |
| Subject: | note 51195 deleted from function.setcookie by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155050@lists.php.net to get a copy of this message | ||
Note Submitter: jonathan at jonathanopie dot com
----
I've found that when using header("Location: <destination page>") type 302
redirect, that cookie information in the header will be silently dropped if the <destination
page> path includes any non-alphanumeric (except the allowed "-" and ".")
characters. That had been pointed out above, and is documented with Microsoft as by design...
http://support.microsoft.com/default.aspx?scid=kb;EN-US;316112
...but what is not made clear, is that the rule seems to include file and directory names too!
Also, I've had unpredictable results when the <destination page> filename begins with ANY
character other than strictly alphanumeric characters, even the otherwise allowed "-" and
"." characters; and/or if the <destination page> is in a different directory.