COOKIE Monsters

Discussion in 'Computer Science & Culture' started by Stryder, Oct 19, 2004.

Thread Status:
Not open for further replies.
  1. Stryder Keeper of "good" ideas. Valued Senior Member

    Messages:
    13,105
    Okay I suppose the titles a little Halloween oriented (and not intendedly Sesame Street)

    The reason for the post is simple, I've found that PHP-Nuke and in fact Sites that use COOKIES to authenticate users (like this site) are having a few problems.

    Firstly:
    <HR>
    PHP-Nuke 403 Error Bug
    PHP Version: 7.4
    Server: Apache 1.3.#, 2.#
    Module: mod_Security
    Nature of Bug:
    Firstly a User can join the site normally, however the problem occurs after they LOGOUT.
    When a user logs out of the site, a Blank COOKIE is created, which doesn't allow the index.php page to be loaded when they come back and generates a 403 error.

    The Only way a user can then access the site is to delete the COOKIE that was set by the site.
    Bug Fix:
    In the Apache Httpd.conf make sure the line:

    SecFilterCheckCookieFormat On

    is changed to:

    SecFilterCheckCookieFormat Off

    (That line only works with mod_Security so there is no point adding it otherwise)
    <HR>
    Microsoft Internet Explorer Bug
    Affects: Most websites with COOKIE authentication
    OS:XP & XP Pro
    Browser: Internet Explorer 6.#
    Nature of Bug:
    When dealing with PHP-Nuke, the COOKIES aren't set making both Navigation anchors and site content not get parsed by the server therefore losing surfers.
    Potentially also causes problems with COOKIE timeouts like logging a person out from these forums constantly.

    Bug fix:
    Serverside code shouldn't use COOKIE authentication, otherwise Internet Explorer Users should do the following:

    Click TOOLS from the Menu in Explorer and select INTERNET OPTIONS.
    Click the PRIVACY Tab and then click the SITES... Button.
    Type in the website that you are having problems with (sciforums.com) and then click the ALLOW button.
    Click OK
    Click APPLY

    You should find with this the browser manages the COOKIES better in regards to the site, both fixing the PHP-Nuke problem and the constant LOGOFF problem.
     
Thread Status:
Not open for further replies.

Share This Page