note 12470 deleted from function.setcookie by sniper

From: Date: Wed, 11 Dec 2002 07:12:48 +0000
Subject: note 12470 deleted from function.setcookie by sniper
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-40707@lists.php.net to get a copy of this message
Regarding the "two dots" issue, it appears that Netscape and IE behave correctly if you send a cookie with no domain. For example, slashdot.org sets a cookie with your login info. This is done by not specifying the domain. Netscape stores the cookie under slashdot.org with its is-a-suffix flag set false. Things work. If, however, you specify a domain such as slashdot.org, Netscape rejects the cookie because it doesn't have two dots. And if you specify .slashdot.org, slashdot.org doesn't match. So it appears that one-dot domain cookies work correctly if you don't specify the domain. [it seems IE ignores all this (big surprise) and accepts one-dot domains.] Regards, Jeremey.

« previous php.notes (#40707) next »