An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.

learn more… | top users | synonyms

10
votes
5answers
2k views

Does the EU cookie law apply to an EU site that is hosted outside of the EU?

I have been reading up about this EU cookie law, and have also had in depth conversations with my girlfriend who is a solicitor/lawyer and with colleagues while building websites. While we are now ...
2
votes
1answer
4k views

mod_rewrite to edit cookies conditionally

Is it possible to use mod_rewrite to modify values in cookies based upon a condition? I am completely new to HTTP, but I have tried a thing or two. The only regex I know is Perl-style, I hope it is ...
0
votes
1answer
387 views

How to use apache mod-rewrite to remove trailing semi-colon on cookie?

We have the following cookie set by a product: Set-Cookie: SSOCookie=T7ngsCmzC2FEq5p2a7o%3D; path=/; domain=.demo.com; We would like to use Apache to remove the trailing ; which doesn't match the ...
3
votes
1answer
132 views

How to offer a cookie opt in/out to users? [duplicate]

Possible Duplicate: Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer? I intend to use google analyticts, and as I understand it I will ...
3
votes
2answers
329 views

Remember me or not?

I was told to post this on webmasters instead of stackoverflow. Is it safe to have the remember me feature? Would it be somewhat safe (knowing it won't be 100% safe) to allow users to close their ...
1
vote
0answers
46 views

Cookies Audit help [closed]

Someone can explain to me what is the purpose of these cookies? I'm doing a cookies audit and I didn't find anything on the web Domain: google.com(google maps), Name: NID Domain: google.com(google ...
0
votes
0answers
77 views

EU Cookie Law Clarification [duplicate]

Possible Duplicate: Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer? Does the EU cookie law apply to an EU site that is hosted outside of ...
0
votes
0answers
50 views

EU Cookiee Law - Should I be worried? [duplicate]

Possible Duplicate: Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer? Given that the year-long "grace period" is up in a day or two, I'm ...
1
vote
1answer
118 views

Making one exclude cookie for multiple google analytics sites

I've got multiple sites all with different google analytics profiles in them (managed under one account). I would like to exclude everyones traffic in the office from all the sites. To do this when ...
2
votes
2answers
148 views

Cookie Audit help needed [closed]

Can anyone recommend any decent cookie audit plugins for firefox or chrome I can see the typical google cookies on the site but I am struggling to find out what a couple of the other cookies actually ...
6
votes
3answers
496 views

Why is the EU cookie directive causing so much excitement?

I am confused by all the excitement surrounding the EU cookie directive; why is it such a painful thing? As far as I can see cookies that are required for your site to function are allowed such as ...
2
votes
1answer
87 views

Redirecting to a default (or last visited) subdirectory. Does Google like this?

i have a site that has 3 web applications, lets use this example: example.com/nicy example.com/mash example.com/zoken The main application is nicy, so if the user comes for the first time (or if ...
14
votes
5answers
3k views

Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?

So Google uses cookies when performing its usual duties of tracking users on a website. That is just it though; Google are setting the cookies and not your website as such. This is by virtue of the ...
4
votes
3answers
2k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
0
votes
1answer
599 views

Verify 2 cookies with mod_rewrite before serving images

I have the following mod_rewrite rule, which works fine in my Apache 2.x on CentOS 6 Linux machine, but is not complete: RewriteCond %{HTTP_COOKIE} !id RewriteCond %{REQUEST_URI} ...
2
votes
1answer
204 views

Does adding LinkedIn button to a website result in cookies that track users?

We are planning to add the LinkedIn button in our website. But the restriction we are having is, the website should not use the cookies which collect the personal information. No impersonation. But I ...
2
votes
4answers
440 views

Can someone explain how FaceBook's cookie tracks you while logged out?

This article claims that Facebook tracks what you do, even when you're logged off of Facebook, via cookies. Now, a cookie is just a text file... that is read/written to while you're actually on that ...
2
votes
2answers
67 views

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work, in case the user's browser crashes.
1
vote
1answer
136 views

Cookie data transfer

The context is a third-party analytics service, specifically Quantcast, but the inquiries are more general in nature. Please forgive and correct me if any of my assumptions are off, and thank you in ...
1
vote
2answers
352 views

Temporary redirect needs to detect the URL of original page request from a search engine then redirect again to that page

I've tried searching this an innumerable amount of times with different word combinations, can't seem to crack it. Apparently I do not know the right terms in this situation. When you come to my ...
1
vote
2answers
255 views

Can search engines change language and read the cookie?

I am building a multi language website in PHP and prepared all my strings in English by default using gettext() My locale/it_IT/LC_MESSAGES/default.mo file is working correctly and now I need to sort ...
1
vote
1answer
806 views

Enforcing a specific order for cookie headers

We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders So we ...
3
votes
5answers
307 views

Variable IPs: How variable are they? Best practices for tracking

There are a lot of questions on StackOverflow relating to session security / session hijacking, but there doesn't seem to be a really good solution to the problem. The three most common suggestions ...
5
votes
1answer
597 views

Forced GZIP Detection on Google App Engine

Some clients are appearing on our Google App Engine instances without the Accept-Encoding header. We normally use the set a cookie with an appended iframe technique (or variation thereof) to detect ...
7
votes
2answers
3k views

How to use cookies in a secure manner to authenticate users?

In most cases I like using cookies to remember returning users to my websites. In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
6
votes
3answers
940 views

Multiple google analytics instances on a page?

My company creates (and hosts) sites for many different clients. We allow clients to send us tracking code, including Google Analytics, and we put them on the page. We would also like to include our ...
10
votes
2answers
508 views

How many domains to split components across?

I understand how splitting components across domains can maximize parallel downloads, and enable you to have cookie-free static content domains, but since there's a time cost for each domain lookup ...