Project

General

Profile

Actions

Bug #1342

closed
KR KD

Paths for session cookie

Bug #1342: Paths for session cookie

Added by Kurt Roeckx about 14 years ago. Updated about 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
06/30/2012
Due date:
% Done:

0%

Estimated time:

Description

Hi,

It seems that you create a session cookie you do it like this;
Set-Cookie: /hello.cgi=h30vvJtxLCTpBsfY; Version=1;

Notice that it doesn't have any Path, and so the browser will add a Path itself, and uses the directory of the request.

There is a problem when the user starts in some internal path, and the browser adds that path internal path. It of course doesn't send the cookie when navigating to a different path.

I suggest you send the path based on the name of the application with the name of the binary removed, so "/hello.cgi" becomes "/".

KD Updated by Koen Deforche about 14 years ago Actions #1

  • Status changed from New to Feedback
  • Assignee set to Koen Deforche

Hey,

is this bug superseded by #1343 ?

Regards,
koen

KR Updated by Kurt Roeckx about 14 years ago Actions #2

No, it's unrelated. This is about a cookie you generate yourself somewhere, probably not using setCookie(). The other is about a cookie I generate using setCookie. The one I generate does have a path, but by default is the wrong one. This bug is about your cookie and that it doesn't have a path.

KD Updated by Koen Deforche about 14 years ago Actions #3

  • Status changed from Feedback to Resolved
  • Target version set to 3.2.2

Hey Kurt,

Indeed so. Although I really advise against using cookies for session tracking since this will cause problems when opening multiple windows/tabs to the same Wt application.

Regards,
koen

KR Updated by Kurt Roeckx about 14 years ago Actions #4

Koen Deforche wrote:

Hey Kurt,

Indeed so. Although I really advise against using cookies for session tracking since this will cause problems when opening multiple windows/tabs to the same Wt application.

I use "Auto" for the tracking. You suggest I change it to "URL"? As far as I know this is an internal thing of Wt to track the tab/window.

Kurt

KD Updated by Koen Deforche about 14 years ago Actions #5

  • Status changed from Resolved to Closed

Released in Wt 3.2.2

Actions

Also available in: PDF Atom