The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
19 views

Change path of cookie: proxy_cookie_path for fastcgi (PHP)

I know there is proxy_cookie_path in nginx for changing the path of a cookie when using a nginx as a reverse proxy. (It works similar to overriding the domain of a cookie.) However I'd like to do the ...
1
vote
0answers
14 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
1
vote
0answers
18 views

Cookie with leading dash [closed]

Just a quick question. Do you know what the leading dash from the cookie value means? Is it possible that this might be a hash? Thanks, Olive
0
votes
0answers
34 views

Adding CSRF token in to Cookies of Post request in Haproxy

My post request to UAA is missing CSRF value i.e. X-Uaa-Csrf=2QytIy. This is required for login in to cloud foundry UAA. This is problem is because of internet domain name /private domain name mapping ...
0
votes
1answer
12 views

Serve media content only to logged in user using Apache

I recently saw this feature on another site where it would server media files, like uploaded images, only when the user is logged in. It would throw an "ACCESS DENIED" page otherwise. So, I ...
1
vote
0answers
21 views

Reverse Proxy Nginx but cookies don't get through for WP admin

I reverse proxy a blog. It's hosted on Apache under a subdomain blog.example.com. In Nginx I have the following config in a server block. Everthing works except the cookies for the WP Admin panel ...
0
votes
0answers
18 views

Pass request cookies to Squid url_rewrite_program

I am using Squid to rewrite requests and cache them. I have written a squid url_rewrite_program using python to rewrite request. Basic rewriting works well. But most of the requests have cookies ...
1
vote
1answer
85 views

SecureCookies, HTTPOnly cookies, .Net, and SSL offloading

So I've been looking into implementing HttpOnly and SecureCookies in my web environment. I have an F5 as the load balancer and a couple of C# web applications hosted in iis 7.5 for the website. The ...
0
votes
0answers
62 views

Backreferencing a cookie value in rewriterule

I'm trying to backreference a cookie's value in a RewriteRule : # Trace rewrite rules log LogLevel alert rewrite:trace4 # Rewriting the URL, in the cookie's condition i've tried en alone, and ...
0
votes
0answers
87 views

Nginx reverse proxy with Tomcat randomly drops session cookie from request

I am running a nginx as a reverse proxy in-front of Tomcat. For some reason a single random requests comes through the pipe without sessionid cookie value. Tracing traffic throug the stack I can see ...
1
vote
1answer
227 views

modsecurity whitelisting certian types of cookies

I am seeing cookies being generated on our server which appear to be from 3rd party objects in the site and don't show themselves when one logs in or navigates through the site. The cookies are ...
0
votes
0answers
17 views

Apache mod_rewrite messing with cookies php script

I have a PHP application that i have worked on for couple of weeks. I have tested it using my local MAMP package(mysql, apache) and it works as expected. But yesterday i published the PHP app on my ...
0
votes
0answers
176 views

CloudFront + S3 Access Denied Using Signed Cookies

I'm trying to integrate signed cookies for a CloudFront distribution that's fed off of an S3 bucket but getting access denied error messages: <Error> <Code>AccessDenied</Code> ...
0
votes
1answer
52 views

phpinfo showing HTTP_ALLOWCOOKIES set to NO - how to change?

We have a dev and live server that were seemingly built identically. However the live server phpinfo() page shows the following in the "Apache Environment" section HTTP_ALLOWCOOKIES NO Don't see ...
0
votes
0answers
33 views

Configure Apache with session logic

I am using Apache 2.4 on CentOS 6. Trying to run external program (via rewritemap) only on the first request by the user. So for each session just run it once and then ignore it until session expires ...
0
votes
0answers
75 views

Set 1 cookie on 2 different subdomains

I am trying to get one cookie to work with 2 domains. Currently using an agreement page once a users first views the website that it will come up and they have to accept the ToS to continue, however ...
0
votes
0answers
67 views

What can cause cookies to arrive empty to the server?

We experience an issue where in IIS advanced logs we see that the requests arrive with SOME of the cookie values missing. Of course the values are missing in the application layer as well. This is ...
2
votes
3answers
930 views

haproxy: how to prepare a server maintenance without kicking app sessions?

The issue I'm using haproxy to load balance web servers. I use session persistence with additional cookies as some applications use session files and these are not synchronized between servers. I ...
0
votes
1answer
175 views

NGINX cache based on cookies

Is there a way for NGINX to have a different cache depending on the value of a cookie? In my case, I have a website (in my case, a plugin) that creates a cookie called devicePixelRatio. This is 1 in ...
0
votes
0answers
27 views

Negative impacts when whitelisting cookies or parameters through a Web Application Firewall

I am trying to configure a Web Application Firewall (from Barracuda). The applications I am trying to protect generated a lot of false positives for cookies and parameters. Ex. Parameter Length ...
0
votes
1answer
380 views

How to make nginx understand dots in cookie values?

I have Nginx configured as a simple sticky LB. One of the key parts of config is matching cookie value to server address. This works fine: map $cookie_sessionServer $http_sticky_backend { default ...
0
votes
1answer
1k views

Reverse Proxy a Sub-directory to a Sub-directory with Apache

I understand proxies in concept (though have never set one up). I'm attempting to proxy Drupal, but I'm fairly sure that my problem is not related to Drupal. As I have been trying to determine the ...
0
votes
2answers
483 views

HAproxy current session is zero

I have some problems on sticky sessions with HAproxy. Haproxy counts every request as a new session. I have a Java servlet that creates the cookie JSESSIONID. If I refresh that page 5 times. The ...
0
votes
1answer
494 views

Https on HAproxy 1.4 using stunnel

I'm running a load balancing server with HAproxy and implementing Https using stunnel on the same machine, on the actual webpages end i've got 2 diferent webs, A and B, with similar behaviour. Here ...
1
vote
1answer
778 views

IIS7 Multiple Websites Same Port

I am trying to set up an internal-only web server of our production websites for QA and development testing. There is no need or intention to access this dev site from outside of the corporate ...
2
votes
1answer
386 views

Varnish - Allow specific cookies for the backend?

I am trying figure out how to allow the backend to see tracking cookies on specific registration pages but ignore them on others. Currently, I'm trying to use a custom header sent from the backend to ...
0
votes
1answer
490 views

Redirection in varnish based on cookie value

We have varnish sitting in front of our site and it is imperative that we cache as much as possible. Recently we decided to ditch GeoIP redirection for interstate content for a more traditional ...
1
vote
2answers
849 views

Internet Explorer ignoring PHP setcookie() from CentOS server

In the past we used a windows XAMPP server for an internal website. It worked fine but had some intermittent issues and we decided to move to a LAMP server on CentOS. We made the switch today but it ...
1
vote
1answer
2k views

PRUM_EPISODES cookie

We have noticed an unusual cookie in our logs: PRUM_EPISODES=s=1379338025465&r=http%3A//www.example.com/demo.html I presume it's a 3rd party control on our site which creates this. Does anyone ...
0
votes
1answer
33 views

Passwords not remembered

We'r running an IIS7 with our .NET4 aspx C# solution ontop as a site. I'm getting reports that some users experience their passwords needs to be retyped at times. I told my boss that is a client side ...
0
votes
1answer
771 views

Laravel/Apache “Bad Request”

I'm playing around with Laravel and implemented the Auth class to create a user registration/login system, i'm using the cookie driver so that members can stay logged in. But most of the time it will ...
0
votes
1answer
406 views

Can Apache clean cookies from a request to specific URLs?

We have the following configuration: <Directory /docs> AuthFormAuthoritative Off AuthType None Allow from all Satisfy any Options FollowSymLinks </Directory> ...
5
votes
1answer
3k views

Problems setting a cookie from a machine proxied by nginx

For a project of mine, I need to wire up a long chain of machines that are essentially proxying the HTTP requests for each other. It goes like this: Web client - A - B/C - D When a request is made ...
0
votes
1answer
791 views

.htaccess RewriteRule with cookies not working

The Joomla CMS Platform has an /administratotr/ folder which cannot be renamed. I'd like to secure it by requiring a custom url parameter to access it - I.E. /administrator/index.php?token=1149785380. ...
1
vote
0answers
291 views

How to add domain to Cisco ACE sticky cookie value?

My Cisco ACE, by default, sets the sticky cookie to not have a domain set. This has the effect of serving the sticky cookie under the domain of the host requested: ...
4
votes
3answers
10k views

Leverage proxy caching with nginx by removing Set-Cookie header

The following is a result of a bug within WebKit's Dev Tools used by Google Chrome and Apple's Safari. I have made a bug report with CrBug, who then identified the regression within WebKit Changeset ...
1
vote
1answer
257 views

Apache2 - Forward a value from URL param OR cookie, whichever is present

I managed to use apache to strip off a url param and stuff it in a header to be passed on to another server. See this question for reference. Now I would like to add to this by getting the value for ...
1
vote
2answers
1k views

Logging of POST requests, cookies and XID in varnish (varnishncsa)

I would like to include following information in my varnishncsa logs (I need to relate some issues with specific users). content of post requests cookie with full content XID After reading ...
0
votes
1answer
286 views

How to test if cookie contains pattern VCL (Varnish)

How can I test if a cookie starts with SESS* in the Varnish config file. I want all requests to hit the server if this cookie is set. Is it a regular regex?
3
votes
1answer
3k views

Setting the secure flag on cookies from Outlook Web Access

I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
0
votes
1answer
209 views

Placing multiple tracking cookies with mod_usertrack module of apache

We are using mod_usertrack module of Apache for tracking user activity on our website. We wish to place additional tracking cookies to differentiate returning users on the website. Can we place ...
3
votes
1answer
370 views

haproxy maxconn and cookie sessions

i have any instances under an haproxy loadbalancer. i am using the haproxy cookies to make each client connect to the same server troughout his whole session. now the thing is, I would like to setup ...
1
vote
2answers
434 views

Expire cookie from web server

I've made some modifications on my user token and current session cookie makes server to redirect the request "in a way that will never complete". The trick is to delog/relog, or wait for session ...
3
votes
2answers
167 views

Where can I report an issue with ASP.NET Browsers File?

While working with an ASP.NET application on Chrome for Android I discovered that Request.Browser.Cookies returns False for that browser (despite the browser supporting cookies). Based on what I've ...
1
vote
0answers
199 views

Rewrite cookies for ISA: add Secure

We've developed a web application. One of our customers decided to run it over HTTP internally and use an ISA server to function as a reverse proxy. The access to the ISA server from the outside world ...
2
votes
1answer
4k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
2
votes
1answer
493 views

Apache mod_cache: Strip/ignore (only) Google Analytics cookies

Varnish has the possibility to strip certain cookies from the request before deciding if a request is non-cachable because it contains cookies. Is there such a thing for Apache's mod_cache? Consider ...
0
votes
1answer
760 views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
0
votes
1answer
548 views

curl cookie and cookiejar trouble

I've got a script that curls a site using a specific cookie value in a cookie file. When I run this on my local system, the server returns the same value to my cookie jar, as per my expectations. When ...
0
votes
1answer
3k views

how to check the value of a cookie in varnish

I have a cookie for language. I want to check if this cookie is set and to check its value to redirect the user to specific page. the cookie name is Lang and its value might be En,Fr,or Ar if ...