Cookie domain Cookie domain
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Cookie domain

Started by Sonya*, August 04, 2008, 12:31:08 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Sonya*

It would be very helpful if there were possibility to define cookie domain in Administration Panel of Coppermine. It would help to solve a lot of problems while integrating with other applications.

What is needed:
1. Additional field in Configuration panel where the value can be set
2. Pass the value to $CONFIG['cookie_domain']
3. Change in files:

  • addfav.php
  • bridge/coppermine.inc.php
  • include/fiunctions.inc.php
  • logout.php (2 times)
  • profile.php
  • thumbnails.php
the function setcookie (...) . Just add the 4th parameter (..,$_CONFIG['cookie_domain']) to the function.

Is it something you can implement this way?



Joachim Müller

What should be the use of a cookie domain? Describe what you're rying to accomplish instead of demanding additional settings.

Sonya*

I integrated login to coppermine and 5 other applications via SOAP (single-sign-on). While logging into coppermine (via SOAP) cookies are passed to SOAP client where they set with setcookie() function. All cookies are set to ".mysite.com" homogeneously. But when I call gallery pages two additional (and identical) cookies are added to domain "www.mysite.com". In other applications I can define domain cookie to avoid such behaviour, but in Coppermine I have to go through all files where cookies set and add cookie domain.

That's all. If it is such a difficult feature to implement, please forget about it.