Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cookie]

The tag has no usage guidance.

0
votes
0answers
37 views

Shopware with nginx cache

We're testing to use a nginx cache with shopware but have some struggle. Maybe you can help. Our configuration: add_header X-Cache-Status $upstream_cache_status; set $no_cache ""; if ($request_uri ~...
2
votes
2answers
456 views

PHP session timeout

I'm having some troubles with the session timeout in a PHP application, I suspect the timeout is given by code but I prefer checking the infrastructure first. The application I'm running is pure PHP 5....
1
vote
1answer
2k views

Apache reverse proxy - ProxyPassReverseCookieDomain not seeming to work

I can't seem to get the Apache directive ProxyPassReverseCookieDomain to actually rewrite the domain. My directive is set as such: ProxyPassReverseCookieDomain "myinternalproxydomain.com" "...
1
vote
1answer
2k views

if not cookie set in nginx

I wanted to restrict access to our downloads section. If users/bots wants to download file without logging in they will see 403 error. Logic is wonderful but it turned out very ugly code location /...
7
votes
1answer
1k views

Is it permissible for an intermediate proxy to add cookies during proxy authentication?

I recently encountered a certain security appliance (BlueCoat) which requires that all connections to the internet must be proxied through it (hello there, man-in-the-middle) and accordingly uses a ...
0
votes
1answer
59 views

Two websites in different servers has same cookie_domain but is not sharing session [closed]

I have two different sites that has their own server. Site#2 sends request to Site#1 for logging customer in. Request contains Allow Crendentials Header and response is status 200. Both sites has same ...
1
vote
0answers
235 views

I'm struggling to configure varnish to account for language cookie

I'm fairly new to the varnish cache world and I need to optimize a Wordpress application that is pretty slow. I made a lot of research today and I made some progress but I'm stuck with the ...
0
votes
1answer
376 views

HTTP and cookies working with multiple severs

Assuming that a simplified diagram of an HTTP/1.1 connection in which the client makes a page and an image request with a cookie assignment can be reduced to this: (Time trasmission of the second ...
0
votes
1answer
2k views

How to use a hypen in cookie names for nginx?

I want to use the new cookie-prefixes, which are not yet standardized by the IETF. These are __Secure- and __Host-. So let's e.g. set this cookie (here the header returned by the server): Set-Cookie:...
0
votes
0answers
201 views

Nginx: add domain into cookie

There is a directive in nginx - proxy_cookie_domain which allows to REPLACE the domain. But my problem is how to ADD the domain substring into the proxied cookies? The backend unfortunately doesn't ...
0
votes
1answer
215 views

User Getting Logged out in IE when closing browser

I am running a Drupal 7 site and am noticing a problem on IE9, when the browser window is closed the user is logged out. We have "remember me" module enabled and the cookie is set to not expire. There ...
1
vote
0answers
965 views

php session tracking cookies (multiple session handling on same domain)

I have 2 applications, both have password based login, database,etc., the passwords are different, databases are different, applications present are in different folders. Log into the first ...
0
votes
0answers
850 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
1k views

HotSpot: Session Failed after Login with Phone Embedded Browsers

Some phones have their embedded browser when they are connecting to HotSpot. (For example in iPhone (iOS) or Windows Phone 8.1). The problem is after login into these browsers (with embedded browser),...
0
votes
1answer
822 views

how to use varnish cache with set-cookie named mp3list and phpsessionid

I am new to php and i am interested to use varnish to improve site performance. I installed the latest version of varnish: 4.0.2 varnish HTTP/1.1 200 OK Date: Sat, 06 Dec 2014 07:24:47 GMT Server: ...
5
votes
1answer
24k views

HttpOnly and secure cookies with Apache mod_header for all cookies

I'm using Apache 2.2.29 for a website. The apache works both to serve pages from Drupal, and as reverse proxy to an internal application server. For security reasons we want to add the flags HttpOnly ...
0
votes
1answer
1k views

Varnish not caching because of language cookie, how to correct behaviour?

I am using Varnish 4 + Pagespeed on Nginx successfully, but varnish is not hitting the cache because the site always pushes a language cookie, disregarding if user is authenticated or not. That ...
1
vote
1answer
990 views

Setting up Nginx — redirecting requests to a auth server and getting redirected back to serve the request

Any incoming request on (x.x.x.x.x)--> redirect to x.x.x.x.auth.domain.edu -- > that authenticates a user and redirects back to x.x.x.x server. (With a cookie set, In my case it is EZproxy server ...
1
vote
1answer
2k views

IIS not sending ASP.Net cookies to IE10 (and only to IE10)

I have IIS 7.5 server running ASP.Net application, which for some reason doesn't send ASP.Net authentication cookies to IE10. This happens only when request comes in from IE10 browser and only over ...
0
votes
1answer
2k views

htaccess redirect based on cookies

I need a welcome page for new visits. If a user don0t have the cookie stored, he will be redirected to welcome page. If the cookie is stored, nothing happens. Header set Set-Cookie "visited=true" ...
1
vote
2answers
67 views

Multiple A record and session/cookie

For example I setup multiple a record for a domain abc.com 115.11.22.33 115.11.22.34 115.11.22.35 Is it true that if one browser successfully establishes a connection to one of the ip's, it ...
0
votes
1answer
2k views

secure cookies when https is done on balancer, but balancer->appserver is http

We're trying to maintain PCI compliance for our application and after an audit, the report was telling us that we need to set the secure flag on our cookies. The site is HTTPS (using pound for https ...
-1
votes
1answer
194 views

WebSphere and updating cookie information

After updating cookie information (name and path) on all my Application Servers in WebSphere and recycling the cluster, the application stopped working correctly and wouldn't allow people to log in. ...
1
vote
1answer
14k views

Remove cookies by cookie name in nginx reverse proxy

I am fairly new to nginx and I am trying to set it up as a reverse proxy server. So far I have apache working as a backend server on 8080 and nginx on port 80. My website uses a lot of cookies which ...
3
votes
1answer
2k views

Changing a Set-Cookie header using mod_rewrite/mod_proxy

I have a bunch of CGI scripts, which are served using HTTPS. They can only be reached on the intranet, not from the outside. They set a cookie with the attribute 'Secure', so that it can only be send ...
5
votes
1answer
2k views

How to not redirect when cookie is set in haproxy?

On my site I redirect users with mobile devices to a mobile site using my Haproxy loadbalancer. I got some complaints about that and want to offer the users a link back to the "classic" portal. As not ...
0
votes
2answers
8k views

Cookie not send in IE, when used in an IFrame from another domain

IE 8 and 9 does not send the cookie on the next request. It works in Chrome 14 and FF 6. In my case I've got an ASP.NET 3.5 web app running that uses cookies for authentication. If the cookie is not ...
1
vote
3answers
3k views

Carrying cookies across redirects when using Apache as a reverse proxy

I'm attempting to setup a reverse proxy using Apache on my local machine, I have the following in my httpd.conf: ProxyPass /app http://x.com ProxyPassReverse /app http://x.com Everything works great ...
1
vote
1answer
7k views

Nagios + check_http with header data

With cURL, I can successfully log into the website I want have Nagios test by passing --cookies. Something like this: curl --cookie "user=4reqrerqwr;userlogin=123adsfjlk324" http://mysite.com/home/...
1
vote
1answer
155 views

trac: keep trac_auth cookie after web browser closes

Is there a way to set how long the trac_auth cookie should live, so that I may stay logged in even after closing the web browser? From what I can see now, it is set to be deleted at browser exit. I ...
10
votes
4answers
28k views

Controlling Nginx proxy target using a cookie?

I'm trying to convert a reverse proxy using an interesting Apache mod_rewrite setup to use Nginx instead (due to external concerns we are moving from Apache to Nginx, and most everything works fine ...
1
vote
1answer
325 views

How to enable/disable mod_deflate based on a cookie?

I would like to enable mod_deflate based on the presence and value of a certain cookie. I know it’s possible to do cookie manipulation and tests with mod_rewrite, but I’m not sure how to do that kind ...
3
votes
1answer
1k views

In an IIS Log what does “…” mean in a “cs(Cookie)” column?

I've checked MSDN, and the W3C format, but nothing seems to explain what causes IIS to output "..." in the "cs(Cookie)" column. My assumption is that the cookie is "too big", but I'd like to know for ...
1
vote
2answers
1k views

Curl receives expired cookies

Why does curl receive an expired cookie? In a response to some url the server is sending a 302 Found response and a cookie. In Firefox this cookie gets set seamlessly. Firebug says: Set-Cookie ...
17
votes
2answers
17k views

What is a cookie-free domain?

What is a cookie-free domain? I've seen these words many times but I never understood what it is.