note 39608 deleted from reserved.variables by aidan

Note Submitter: space at nospam dot org ---- CAVEAT: HTTP_HOST & firewalls/port redirects. it looks like a reasonable thing to use HTTP_HOST to set the domain for a cookie, because you'll always have the proper adress (as seen from the browser) referred there and not the server ip/adress itself [which might be different behind a firewall]. but if your server is firewalled AND has a different port number (:81 etc), HTTP_HOST will not only have the called IP, but also the called port (e.g. xxx.xxx.xxx.xxx:81). settings cookies for that adress will yield no results.