Cookie Domain in cpg132 Cookie Domain in cpg132
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Cookie Domain in cpg132

Started by go77306, December 11, 2004, 03:44:15 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

go77306

Hi:

I wanted to integrate cpg132 with ipb2.0.  I found my CPG132's cookie domain is always set to www.mydomain.com, and my ipb20's cookie domain is mydomain.com.  I can change my ipb20's cookie domain to www.mydomain.com.  However, I am just wondering if there is a way to change CPG132's cookie domain from www.mydomain.com to mydomain.com?

Thanks in advance!

Joachim Müller

coppermine's cookie domain is not set to www.domain.tld!

Joachim

go77306

Quote from: GauGau on December 11, 2004, 04:06:09 PM
coppermine's cookie domain is not set to www.domain.tld!

Joachim

Here is my cookie screen shots:

go77306

Quote from: go77306 on December 12, 2004, 02:04:45 PM
Quote from: GauGau on December 11, 2004, 04:06:09 PM
coppermine's cookie domain is not set to www.domain.tld!

Joachim

Here is my cookie screen shots:
see, the cookie host  starts with www

go77306

Quote from: go77306 on December 12, 2004, 02:05:51 PM
Quote from: go77306 on December 12, 2004, 02:04:45 PM
Quote from: GauGau on December 11, 2004, 04:06:09 PM
coppermine's cookie domain is not set to www.domain.tld!

Joachim

Here is my cookie screen shots:
see, the cookie host  starts with www

I was access my gallery from this URL: http://www.campgroundcanada.com/gallery
If I access my gallery from the url without www (e.g. http://campgroundcanada.com/gallery), then my cookie domain is campgroundcanada.com
Why this happened?  Where can I check if my cookie domain setting for CPG is correct?

Thanks

kegobeer

Coppermine doesn't use a domain identifier, just a domain path, which is set to / by default.  If you access your site without the www you have a different cookie.  I believe you can redirect all requests that don't have www to your www site to avoid this problem.  This is possible using a htaccess file, if you are using Apache.  There may be a post about this on our forums, but if not you can always Google for htaccess mod_rewrite redirect.
Do not send me a private message unless I ask for one.  Make your post public so everyone can benefit.

There are no stupid questions
But there are a LOT of inquisitive idiots

Joachim Müller

kegobeer is right (as always :D) - coppermine doesn't set the cookie domain. You've just found out the basic way cookies work on the internet. Your screenshot is taken from the cookie section of IE as far as I can see - do you trust M$ to provide accurate information anyway ;)?
When accessing your site with a good browser this is what I see as cookie information:
QuoteCookie Information - http://www.campgroundcanada.com/gallery/
http://www.campgroundcanada.com/gallery/
Name   gallery-_data
Value   YToyOntzOjI6IklEIjtzOjMyOiJmZGM3ZTllMTBhNWRiYWE2Njg2ZjQ1MzcxMWJjZWE1NSI7czoyOiJhbSI7aToxO30%3D
Host   www.campgroundcanada.com
Path   /
Expires   Mittwoch, 12. Januar 2005 08:19:10
Can you see any reference to "cookie domain"? I can't.

Joachim

go77306

my screenshot was from Mozilla's cookie manager :-)
Well, I believe everybody's IPB2.0's cookie domain name is .domain.com, and it works with cpg very well.  My ipb2.0's cookie must be set to www.domain.com in order to let cpg 1.3.2 work.  I think that is the problem.

Joachim Müller

actually no, afaik: .domain.tld means anything.domain.tld.

Joachim