The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
8 views

Set 1 cookie on 2 different subdomains

I am trying to get one cookie to work with 2 domains. Currently using an agreement page once a users first views the website that it will come up and they have to accept the ToS to continue, however ...
0
votes
0answers
24 views

What can cause cookies to arrive empty to the server?

We experience an issue where in IIS advanced logs we see that the requests arrive with SOME of the cookie values missing. Of course the values are missing in the application layer as well. This is ...
1
vote
2answers
48 views

haproxy: how to prepare a server maintenance without kicking app sessions?

The issue I'm using haproxy to load balance web servers. I use session persistence with additional cookies as some applications use session files and these are not synchronized between servers. I ...
-1
votes
1answer
24 views

Apache multiple environments based on cookie

I'm redesigning a website and the customer wants me to setup two designs for users, so they can switch between them. The URL's have to remain the same only the location where files are taken from has ...
0
votes
1answer
21 views

NGINX cache based on cookies

Is there a way for NGINX to have a different cache depending on the value of a cookie? In my case, I have a website (in my case, a plugin) that creates a cookie called devicePixelRatio. This is 1 in ...
0
votes
0answers
5 views

Negative impacts when whitelisting cookies or parameters through a Web Application Firewall

I am trying to configure a Web Application Firewall (from Barracuda). The applications I am trying to protect generated a lot of false positives for cookies and parameters. Ex. Parameter Length ...
0
votes
0answers
38 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
0answers
45 views

Saving a cookie value in a stick table to later allow requests in HAProxy

I have an HAproxy with two URL-based routes: /route1 and /route2 (both under the same domain). These are the purposes of each one: /route1 contains the main website where you log in and get a cookie ...
0
votes
1answer
235 views

How to make nginx understand dots in cookie values?

I have Nginx configured as a simple sticky LB. One of the key parts of config is matching cookie value to server address. This works fine: map $cookie_sessionServer $http_sticky_backend { default ...
0
votes
0answers
10 views

mod_rewrite: Use Substitution from Previous Condition

I'm trying to do a basic language redirect based on a cookie. To do that and prevent a loop, I need to check that the user isn't already on the correct URL, so I wrote this rule: RewriteCond ...
0
votes
0answers
120 views

Glassfish-3.0.1 mixing user sessions - SSO

We are experiencing a strange behaviour, we have an application (jsf 2.2.4 embedded) that has a login form, glassfish has sso enabled and a custom realm (LDAP). We have also several applications (some ...
0
votes
1answer
793 views

Reverse Proxy a Sub-directory to a Sub-directory with Apache

I understand proxies in concept (though have never set one up). I'm attempting to proxy Drupal, but I'm fairly sure that my problem is not related to Drupal. As I have been trying to determine the ...
0
votes
2answers
368 views

HAproxy current session is zero

I have some problems on sticky sessions with HAproxy. Haproxy counts every request as a new session. I have a Java servlet that creates the cookie JSESSIONID. If I refresh that page 5 times. The ...
0
votes
1answer
285 views

Https on HAproxy 1.4 using stunnel

I'm running a load balancing server with HAproxy and implementing Https using stunnel on the same machine, on the actual webpages end i've got 2 diferent webs, A and B, with similar behaviour. Here ...
1
vote
1answer
613 views

IIS7 Multiple Websites Same Port

I am trying to set up an internal-only web server of our production websites for QA and development testing. There is no need or intention to access this dev site from outside of the corporate ...
2
votes
1answer
217 views

Varnish - Allow specific cookies for the backend?

I am trying figure out how to allow the backend to see tracking cookies on specific registration pages but ignore them on others. Currently, I'm trying to use a custom header sent from the backend to ...
0
votes
1answer
368 views

Redirection in varnish based on cookie value

We have varnish sitting in front of our site and it is imperative that we cache as much as possible. Recently we decided to ditch GeoIP redirection for interstate content for a more traditional ...
1
vote
2answers
613 views

Internet Explorer ignoring PHP setcookie() from CentOS server

In the past we used a windows XAMPP server for an internal website. It worked fine but had some intermittent issues and we decided to move to a LAMP server on CentOS. We made the switch today but it ...
1
vote
1answer
1k views

PRUM_EPISODES cookie

We have noticed an unusual cookie in our logs: PRUM_EPISODES=s=1379338025465&r=http%3A//www.example.com/demo.html I presume it's a 3rd party control on our site which creates this. Does anyone ...
0
votes
1answer
33 views

Passwords not remembered

We'r running an IIS7 with our .NET4 aspx C# solution ontop as a site. I'm getting reports that some users experience their passwords needs to be retyped at times. I told my boss that is a client side ...
0
votes
1answer
509 views

Laravel/Apache “Bad Request”

I'm playing around with Laravel and implemented the Auth class to create a user registration/login system, i'm using the cookie driver so that members can stay logged in. But most of the time it will ...
0
votes
1answer
206 views

Can Apache clean cookies from a request to specific URLs?

We have the following configuration: <Directory /docs> AuthFormAuthoritative Off AuthType None Allow from all Satisfy any Options FollowSymLinks </Directory> ...
4
votes
1answer
2k views

Problems setting a cookie from a machine proxied by nginx

For a project of mine, I need to wire up a long chain of machines that are essentially proxying the HTTP requests for each other. It goes like this: Web client - A - B/C - D When a request is made ...
0
votes
1answer
536 views

.htaccess RewriteRule with cookies not working

The Joomla CMS Platform has an /administratotr/ folder which cannot be renamed. I'd like to secure it by requiring a custom url parameter to access it - I.E. /administrator/index.php?token=1149785380. ...
1
vote
0answers
238 views

How to add domain to Cisco ACE sticky cookie value?

My Cisco ACE, by default, sets the sticky cookie to not have a domain set. This has the effect of serving the sticky cookie under the domain of the host requested: ...
3
votes
3answers
7k views

Leverage proxy caching with nginx by removing Set-Cookie header

The following is a result of a bug within WebKit's Dev Tools used by Google Chrome and Apple's Safari. I have made a bug report with CrBug, who then identified the regression within WebKit Changeset ...
1
vote
1answer
201 views

Apache2 - Forward a value from URL param OR cookie, whichever is present

I managed to use apache to strip off a url param and stuff it in a header to be passed on to another server. See this question for reference. Now I would like to add to this by getting the value for ...
1
vote
2answers
1k views

Logging of POST requests, cookies and XID in varnish (varnishncsa)

I would like to include following information in my varnishncsa logs (I need to relate some issues with specific users). content of post requests cookie with full content XID After reading ...
0
votes
1answer
213 views

How to test if cookie contains pattern VCL (Varnish)

How can I test if a cookie starts with SESS* in the Varnish config file. I want all requests to hit the server if this cookie is set. Is it a regular regex?
3
votes
1answer
2k views

Setting the secure flag on cookies from Outlook Web Access

I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
0
votes
1answer
178 views

Placing multiple tracking cookies with mod_usertrack module of apache

We are using mod_usertrack module of Apache for tracking user activity on our website. We wish to place additional tracking cookies to differentiate returning users on the website. Can we place ...
2
votes
1answer
315 views

haproxy maxconn and cookie sessions

i have any instances under an haproxy loadbalancer. i am using the haproxy cookies to make each client connect to the same server troughout his whole session. now the thing is, I would like to setup ...
1
vote
2answers
277 views

Expire cookie from web server

I've made some modifications on my user token and current session cookie makes server to redirect the request "in a way that will never complete". The trick is to delog/relog, or wait for session ...
3
votes
2answers
162 views

Where can I report an issue with ASP.NET Browsers File?

While working with an ASP.NET application on Chrome for Android I discovered that Request.Browser.Cookies returns False for that browser (despite the browser supporting cookies). Based on what I've ...
1
vote
0answers
181 views

Rewrite cookies for ISA: add Secure

We've developed a web application. One of our customers decided to run it over HTTP internally and use an ISA server to function as a reverse proxy. The access to the ISA server from the outside world ...
2
votes
1answer
3k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
2
votes
1answer
424 views

Apache mod_cache: Strip/ignore (only) Google Analytics cookies

Varnish has the possibility to strip certain cookies from the request before deciding if a request is non-cachable because it contains cookies. Is there such a thing for Apache's mod_cache? Consider ...
0
votes
1answer
649 views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
0
votes
1answer
432 views

curl cookie and cookiejar trouble

I've got a script that curls a site using a specific cookie value in a cookie file. When I run this on my local system, the server returns the same value to my cookie jar, as per my expectations. When ...
0
votes
1answer
2k views

how to check the value of a cookie in varnish

I have a cookie for language. I want to check if this cookie is set and to check its value to redirect the user to specific page. the cookie name is Lang and its value might be En,Fr,or Ar if ...
11
votes
3answers
15k views

How to rewrite the domain part of Set-Cookie in a nginx reverse proxy?

I have a simple nginx reverse proxy: server { server_name external.domain.com; location / { proxy_pass http://backend.int/; } } The problem is that Set-Cookie response headers contain ...
1
vote
1answer
1k views

How can I configure a Windows Embedded Standard 7 Thin Client to permanently store IE Browser Cookies?

I have a Wyse C90LE7 Thin Client with Windows Embedded Standard 7. By default it stores Internet Explorer Cookies in a Folder on the Z: ramdrive. I need the Cookies to be stored on the C: flash ...
4
votes
2answers
1k views

non-www domains prevent hosting of static content on the same domain, correct?

Flaw to using non-www domain a canonical? I love the idea of short, clean urls like example.com over www.example.com, and certainly whichever one is used should redirect to the other. However, as I ...
2
votes
2answers
454 views

Bad Request Due to “Bad” Cookie

I have a web site under a domain, where the main domain is using Google Analytics which sets a cookie named __utmva which is value is part binary. As far as I can tell passing this cookie to IIS ...
2
votes
0answers
223 views

Vanilla .Net 4.0 website cannot identify some AppleWebKit based browsers

We are seeing some Safari browsers failing to cross-authenticate our website after we upgrade to .net 4.0 from .net 3.5. After much investigation, it turns out to be a problem with ASP.Net ...
4
votes
2answers
9k views

Apache mod_header rule to change all cookies to secure

I would like to change all cookies to be secure and http-only. It works fine for one cookie, but doesn't work when multiple cookies are set in response. Apache mod_header rule should change cookies ...
2
votes
2answers
3k views

How to configure cookieless virtual host in Apache2?

We run over a hundred web applications (growing daily) on a LAMP stack using Apache2 on Ubuntu 10.04. We've would like all requests to static content to be cookieless. We host applications on many ...
1
vote
2answers
1k views

Haproxy Check if Cookie is Set

I have a Haproxy config that is currently in development and I am using the following code in order to find if the requesting user will accept a cookie or not as the script at the end destination ...
2
votes
2answers
3k views

How to add recently set cookies to nginx's access log

I'd like to include cookie data in an nginx access log like so: (simplified example) log_format foo '$remote_addr "$request" $cookie_bar'; access_log /var/log/nginx/access.log foo; This works ...
6
votes
1answer
2k views

Date header returned by IIS7 is wrong

I am serving an ASP.NET application from IIS 7 but we are experiencing some weird cookie issues. The code works fine in other environments so we are assuming this is specific to this server (related ...