Project

General

Profile

Actions

Bug #1342

closed

Paths for session cookie

Added by Kurt Roeckx almost 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
06/30/2012
Due date:
% Done:

0%

Estimated time:

Description

Hi,

It seems that you create a session cookie you do it like this;

Set-Cookie: /hello.cgi=h30vvJtxLCTpBsfY; Version=1;

Notice that it doesn't have any Path, and so the browser will add a Path itself, and uses the directory of the request.

There is a problem when the user starts in some internal path, and the browser adds that path internal path. It of course doesn't send the cookie when navigating to a different path.

I suggest you send the path based on the name of the application with the name of the binary removed, so "/hello.cgi" becomes "/".

Actions #1

Updated by Koen Deforche almost 12 years ago

  • Status changed from New to Feedback
  • Assignee set to Koen Deforche

Hey,

is this bug superseded by #1343 ?

Regards,

koen

Actions #2

Updated by Kurt Roeckx almost 12 years ago

No, it's unrelated. This is about a cookie you generate yourself somewhere, probably not using setCookie(). The other is about a cookie I generate using setCookie. The one I generate does have a path, but by default is the wrong one. This bug is about your cookie and that it doesn't have a path.

Actions #3

Updated by Koen Deforche almost 12 years ago

  • Status changed from Feedback to Resolved
  • Target version set to 3.2.2

Hey Kurt,

Indeed so. Although I really advise against using cookies for session tracking since this will cause problems when opening multiple windows/tabs to the same Wt application.

Regards,

koen

Actions #4

Updated by Kurt Roeckx almost 12 years ago

Koen Deforche wrote:

Hey Kurt,

Indeed so. Although I really advise against using cookies for session tracking since this will cause problems when opening multiple windows/tabs to the same Wt application.

I use "Auto" for the tracking. You suggest I change it to "URL"? As far as I know this is an internal thing of Wt to track the tab/window.

Kurt

Actions #5

Updated by Koen Deforche almost 12 years ago

  • Status changed from Resolved to Closed

Released in Wt 3.2.2

Actions

Also available in: Atom PDF