note 35395 added to function.setcookie

From: Date: Fri, 29 Aug 2003 17:29:45 +0000
Subject: note 35395 added to function.setcookie
Groups: php.notes 
Request: Send a blank email to php-notes+get-55313@lists.php.net to get a copy of this message
Hi. Microsoft, in msie6 sp1, produced a patch that solves some cookie vulnerability issues. Look for details in: http://support.microsoft.com/default.aspx?scid=kb;en-us;312461 This patch requires that server domains that use cookies MUST (yes, they MUST) only have alpha-numeric characters (or '-' or '.') in the domain name. (WHY ???????) If you have a server domain name called 'aaa_test.domain.net' you will have problems because msie 6 ignores the cookies. So, be carefull with domain names. If you use cookies and want to be msie 6 compliant, you can only have alpha-numeric characters (or '-' or '.') in the server domain name. Best regards, Grooou ---- Manual Page -- http://www.php.net/manual/en/function.setcookie.php Edit Note -- http://master.php.net/manage/user-notes.php?action=edit+35395 Delete Note -- http://master.php.net/manage/user-notes.php?action=delete+35395&report=yes Reject Note -- http://master.php.net/manage/user-notes.php?action=reject+35395&report=yes

« previous php.notes (#55313) next »