An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.

learn more… | top users | synonyms

0
votes
1answer
112 views

.htaccess - redirect if visitor is logged into google

I need a .htaccess redirect rule that redirects visitors to a url only if the visitor is logged into google. I was thinking of doing it by looking into cookies RewriteEngine On RewriteCond ...
6
votes
1answer
3k views

What happens if I try to set a cookie on a bot?

I'm building my site to include some user-identifying cookies. When a visitor chimes in, I will set a cookie with a unique visitor id (a guid) and the date-time of the visit, and save a visit record ...
12
votes
1answer
1k views

Do many users turn off cookies?

Just how generally prevalent is it that users have cookies disabled in their browsers? I want to set a cookie during a user's session so that all the pages know that the presence of a particular ...
1
vote
1answer
73 views

Returning visitor stats reliably over longer periods of time in Google Analytics

I'm looking into how useful returning visitors stats in Google Analytics are over longer periods of time, such as two or three years. It seems that the __utma cookie is set to expire 2 years from ...
2
votes
2answers
276 views

Can a website require search engine robots to support cookies?

Sometimes I pretend to be a search engine robot to get access to "subscriber only" web pages, or just to get a plain and simple view of a page that isn't cluttered with moving animations and other ...
3
votes
1answer
2k views

Using .htaccess to set a cookie and 301 redirect

I currently have in my .htaccess: RewriteRule ^$ http://chfmaine.com/ [CO=moved:yes:chfmaine.com:1/,R=301,NE,NC,L] I was basing this off of this post. That's a lot more than I need but the setting ...
2
votes
2answers
1k views

Setting cookies only on the naked domain

As far as I know, one can set a cookie for example.com and not .example.com and then the cookie will only be visible on example.com and not sub.example.com. Is this true? I have set a cookie on a test ...
1
vote
1answer
84 views

How can you set cookieless subdomain with Quantcast

I have correctly setup Google Analtycis so GA is not setting cookies for my subdomain. I mean for my static subdomain. But Quantcast is setting. What i wonder is can i prevent Quantcast to set cookie ...
1
vote
3answers
245 views

cookie not being sent when requesting JS

I host a webservice, and provide my members with a Javascript bookmarklet, which loads a JS sript from my server. However, clients must be logged in, in order to receive the JS script. This works for ...
30
votes
6answers
3k views

Standard ratio of cookies to “visitors”?

As noted in a recent blog post, We see a large discrepancy between Google Analytics "visitors" and Quantcast "visitors". Also, for reasons we have never figured out, Google Analytics just gets ...
0
votes
1answer
871 views

What are these cookies for: __switchTo5x, __unam, __qca?

I tested on my local Mac's (OS X 10.6.8) Apache. Just now, I did a print_r($_SERVER) from a PHP script, and it shows these three cookies. What is that all about? I didn't set them. Is this something ...
2
votes
2answers
245 views

Cookie manager PHP

I own a Joomla commerce store and although I use Google Analytics in order to track visitors, I need to install a cookie manager in order to be able to track cookies that were installed on customer ...
0
votes
1answer
85 views

Workaround for Chrome not handling backward date change in Windows

I'm heavily making use of cookies for a website. Their expiry period is set to 1 day. My preferred test browser is Chrome 28, Windows 7. For a test, I need to change the date of my OS back to eg the ...
1
vote
3answers
2k views

What are the problems of httponly and secure cookies?

We would like to set: all our cookies (session id, etc.) as "httponly" all security (session token, "remember me", etc.) cookies as "secure" Except compatiblity issues, what are the know problems ...
2
votes
2answers
395 views

How to display Cookie Notification text to users that is ignored by Search Engines?

Websites within the EU are meant to inform users about the use of cookies on their website. Whilst the law raises plenty of implementation questions already, the general consensus is that we must at ...
1
vote
1answer
39 views

Cookie being assigned on website

I am updating our privacy policy and was checking what cookies were being assigned to visitors from our website. I found one that I am unaware of. It is a Drupal 6 site and there is no module being ...
2
votes
0answers
419 views

How can I set a secure flag on cookies generated from a Python application?

I have an application written in Python running behind Apache and SSL. I am not seeing a secure flag on my cookie: apache Server version: Apache/2.2.15 (Unix) I have added a configuration line to my ...
3
votes
1answer
146 views

How to handle pages that requires the use of session cookie?

I have a search page that uses session to track search criteria made by the user. A session cookie is created automatically when the page is launched. As bots do not use cookie, 1000s of sessions ...
19
votes
3answers
11k views

How do I set up a cookie-less domain?

I've read that it's best to serve static content (css, javascript, etc.) from a cookie-less domain or subdomain for better performance. I assume a domain is not cookie-less by default. How do I ...
0
votes
1answer
3k views

Apache server not able to read cookies from Browser

I have developed a login authentication page using cookies (with spring security) where for the first time, the user will need to get itself authenticated. Once the user gets successfully ...
6
votes
4answers
3k views

How can I tell Google Analytics to not use cookies for my sub domain?

I have my web site at example.com, and i have also setup a sub domain for serving static content at static.example.com. On my web pages I'm using Google Analytics, so it will attach its cookies to all ...
3
votes
1answer
952 views

SEO for images: can I use a different (cookieless) domain?

We want to increase the value of some of our important images by means of SEO, and we want to start serving them from a different, i.e. cookieless, domain. We want to go from ...
4
votes
1answer
746 views

Age verification in website questions

I am working on a website for a client that is requesting a way to verify your age. I have debated on creating a cookie that stores your age but I am unsure on a few things. How does SEO play into ...
1
vote
1answer
88 views

Empty Cookie based on IP address

Is there a way to empty a previous cookie based on source ip? I need this to be done because of loadbalancing issues. regards Geert
7
votes
1answer
158 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
3
votes
1answer
5k views

Do iframes have access to the cookies of the hosting domain?

We want to build an ad-frame which will run on external sites (e.g. YYY.com). The external site will place an iframe to our site (ZZZ.com/ourAdContent.html) and we will show some ads in this frame. ...
0
votes
1answer
309 views

How to Track Visitors Comming from Adwords and Disable form fields that is not on landing page

There is a lead form on my website where we track from which source visitors have arrived. I wanted to disable the drop down and auto populate it with predefined data if the visitor is from adwords. ...
2
votes
1answer
3k views

What does the Quantcast __qca cookie do?

I'm reviewing the cookies served up from my website and one of them is a first-party cookie __qca which seems to be set by Quantcast. I'm sure this is just used for tracking, but I can't find this ...
4
votes
2answers
753 views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
2
votes
1answer
6k views

mod_rewrite to edit cookies conditionally

Is it possible to use mod_rewrite to modify values in cookies based upon a condition? I am completely new to HTTP, but I have tried a thing or two. The only regex I know is Perl-style, I hope it is ...
0
votes
1answer
475 views

How to use apache mod-rewrite to remove trailing semi-colon on cookie?

We have the following cookie set by a product: Set-Cookie: SSOCookie=T7ngsCmzC2FEq5p2a7o%3D; path=/; domain=.demo.com; We would like to use Apache to remove the trailing ; which doesn't match the ...
3
votes
2answers
397 views

Remember me or not?

I was told to post this on webmasters instead of stackoverflow. Is it safe to have the remember me feature? Would it be somewhat safe (knowing it won't be 100% safe) to allow users to close their ...
1
vote
1answer
120 views

Making one exclude cookie for multiple google analytics sites

I've got multiple sites all with different google analytics profiles in them (managed under one account). I would like to exclude everyones traffic in the office from all the sites. To do this when ...
3
votes
2answers
159 views

Cookie Audit help needed [closed]

Can anyone recommend any decent cookie audit plugins for firefox or chrome I can see the typical google cookies on the site but I am struggling to find out what a couple of the other cookies actually ...
7
votes
3answers
541 views

Why is the EU cookie directive causing so much excitement?

I am confused by all the excitement surrounding the EU cookie directive; why is it such a painful thing? As far as I can see cookies that are required for your site to function are allowed such as ...
2
votes
1answer
92 views

Redirecting to a default (or last visited) subdirectory. Does Google like this?

i have a site that has 3 web applications, lets use this example: example.com/nicy example.com/mash example.com/zoken The main application is nicy, so if the user comes for the first time (or if ...
4
votes
3answers
3k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
1
vote
1answer
708 views

Verify 2 cookies with mod_rewrite before serving images

I have the following mod_rewrite rule, which works fine in my Apache 2.x on CentOS 6 Linux machine, but is not complete: RewriteCond %{HTTP_COOKIE} !id RewriteCond %{REQUEST_URI} ...
2
votes
1answer
222 views

Does adding LinkedIn button to a website result in cookies that track users?

We are planning to add the LinkedIn button in our website. But the restriction we are having is, the website should not use the cookies which collect the personal information. No impersonation. But I ...
2
votes
4answers
490 views

Can someone explain how FaceBook's cookie tracks you while logged out?

This article claims that Facebook tracks what you do, even when you're logged off of Facebook, via cookies. Now, a cookie is just a text file... that is read/written to while you're actually on that ...
2
votes
2answers
70 views

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work, in case the user's browser crashes.
1
vote
1answer
150 views

Cookie data transfer

The context is a third-party analytics service, specifically Quantcast, but the inquiries are more general in nature. Please forgive and correct me if any of my assumptions are off, and thank you in ...
1
vote
2answers
390 views

Temporary redirect needs to detect the URL of original page request from a search engine then redirect again to that page

I've tried searching this an innumerable amount of times with different word combinations, can't seem to crack it. Apparently I do not know the right terms in this situation. When you come to my ...
1
vote
2answers
264 views

Can search engines change language and read the cookie?

I am building a multi language website in PHP and prepared all my strings in English by default using gettext() My locale/it_IT/LC_MESSAGES/default.mo file is working correctly and now I need to sort ...
1
vote
1answer
961 views

Enforcing a specific order for cookie headers

We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders So we ...
3
votes
5answers
325 views

Variable IPs: How variable are they? Best practices for tracking

There are a lot of questions on StackOverflow relating to session security / session hijacking, but there doesn't seem to be a really good solution to the problem. The three most common suggestions ...
5
votes
1answer
682 views

Forced GZIP Detection on Google App Engine

Some clients are appearing on our Google App Engine instances without the Accept-Encoding header. We normally use the set a cookie with an appended iframe technique (or variation thereof) to detect ...
7
votes
2answers
4k views

How to use cookies in a secure manner to authenticate users?

In most cases I like using cookies to remember returning users to my websites. In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
6
votes
3answers
1k views

Multiple google analytics instances on a page?

My company creates (and hosts) sites for many different clients. We allow clients to send us tracking code, including Google Analytics, and we put them on the page. We would also like to include our ...
10
votes
2answers
595 views

How many domains to split components across?

I understand how splitting components across domains can maximize parallel downloads, and enable you to have cookie-free static content domains, but since there's a time cost for each domain lookup ...