An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.
28
votes
6answers
3k views
Standard ratio of cookies to “visitors”?
As noted in a recent blog post, We see a large discrepancy between Google Analytics "visitors" and Quantcast "visitors".
Also, for reasons we have never figured out, Google Analytics just gets ...
13
votes
5answers
2k views
Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?
So Google uses cookies when performing its usual duties of tracking users on a website. That is just it though; Google are setting the cookies and not your website as such. This is by virtue of the ...
12
votes
3answers
5k views
How do I set up a cookie-less domain?
I've read that it's best to serve static content (css, javascript, etc.) from a cookie-less domain or subdomain for better performance. I assume a domain is not cookie-less by default. How do I ...
9
votes
5answers
2k views
Does the EU cookie law apply to an EU site that is hosted outside of the EU?
I have been reading up about this EU cookie law, and have also had in depth conversations with my girlfriend who is a solicitor/lawyer and with colleagues while building websites. While we are now ...
9
votes
2answers
313 views
How many domains to split components across?
I understand how splitting components across domains can maximize parallel downloads, and enable you to have cookie-free static content domains, but since there's a time cost for each domain lookup ...
7
votes
2answers
2k views
How to use cookies in a secure manner to authenticate users?
In most cases I like using cookies to remember returning users to my websites.
In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
6
votes
3answers
471 views
Why is the EU cookie directive causing so much excitement?
I am confused by all the excitement surrounding the EU cookie directive; why is it such a painful thing?
As far as I can see cookies that are required for your site to function are allowed such as ...
6
votes
3answers
668 views
Multiple google analytics instances on a page?
My company creates (and hosts) sites for many different clients. We allow clients to send us tracking code, including Google Analytics, and we put them on the page.
We would also like to include our ...
6
votes
1answer
107 views
Does the SPDY protocol eliminate the need for cookieless domains?
With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources.
However, the SPDY protocol compresses HTTP headers and in some cases ...
5
votes
4answers
1k views
How can I tell Google Analytics to not use cookies for my sub domain?
I have my web site at example.com, and i have also setup a sub domain for serving static content at static.example.com.
On my web pages I'm using Google Analytics, so it will attach its cookies to all ...
5
votes
1answer
523 views
Forced GZIP Detection on Google App Engine
Some clients are appearing on our Google App Engine instances without the Accept-Encoding header. We normally use the set a cookie with an appended iframe technique (or variation thereof) to detect ...
4
votes
2answers
365 views
Google Analytics setting cookies on static content despite being on entirely separate domain
I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain.
As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
4
votes
1answer
168 views
Age verification in website questions
I am working on a website for a client that is requesting a way to verify your age. I have debated on creating a cookie that stores your age but I am unsure on a few things.
How does SEO play into ...
3
votes
1answer
517 views
SEO for images: can I use a different (cookieless) domain?
We want to increase the value of some of our important images by means of SEO, and
we want to start serving them from a different, i.e. cookieless, domain.
We want to go from ...
3
votes
2answers
182 views
Remember me or not?
I was told to post this on webmasters instead of stackoverflow.
Is it safe to have the remember me feature? Would it be somewhat safe (knowing it won't be 100% safe) to allow users to close their ...
3
votes
1answer
526 views
What is the BCSI-CS-**** cookie for?
I'm undertaking an audit of the cookies we use on our external sites.
There's one cookie that's used by all the sites, and by different domains within the sites. It starts BCSI-CS- and has random ...
3
votes
1answer
117 views
How to offer a cookie opt in/out to users? [duplicate]
Possible Duplicate:
Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?
I intend to use google analyticts, and as I understand it I will ...
3
votes
5answers
253 views
Variable IPs: How variable are they? Best practices for tracking
There are a lot of questions on StackOverflow relating to session security / session hijacking, but there doesn't seem to be a really good solution to the problem. The three most common suggestions ...
2
votes
4answers
340 views
Can someone explain how FaceBook's cookie tracks you while logged out?
This article claims that Facebook tracks what you do, even when you're logged off of Facebook, via cookies.
Now, a cookie is just a text file... that is read/written to while you're actually on that ...
2
votes
3answers
127 views
SEO - Redirect on first page (site.com -> site.com/en)
I have website with multiple languages and at first entrance it checks for cookie and if no cookie is present then it defaults to English language and redirects to site.com/en.
So basically every ...
2
votes
2answers
52 views
How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work
How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work, in case the user's browser crashes.
2
votes
1answer
74 views
Redirecting to a default (or last visited) subdirectory. Does Google like this?
i have a site that has 3 web applications, lets use this example:
example.com/nicy
example.com/mash
example.com/zoken
The main application is nicy, so if the user comes for the first time (or if ...
2
votes
1answer
161 views
Does adding LinkedIn button to a website result in cookies that track users?
We are planning to add the LinkedIn button in our website. But the restriction we are having is, the website should not use the cookies which collect the personal information.
No impersonation.
But I ...
2
votes
1answer
89 views
Google AdSense reloading?
Please tell me something about Google AdSense:
1) Can i reload ads by myself without full-page-reloading? For example refresh AdSense frame or call some script?
2) About "interest-based advertising" ...
2
votes
1answer
891 views
mod_rewrite to edit cookies conditionally
Is it possible to use mod_rewrite to modify values in cookies based upon a condition? I am completely new to HTTP, but I have tried a thing or two. The only regex I know is Perl-style, I hope it is ...
2
votes
3answers
1k views
Session cookie being dropped when moving under the SSL
The short version:
I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout).
When it's set on ...
2
votes
1answer
2k views
What does the Quantcast __qca cookie do?
I'm reviewing the cookies served up from my website and one of them is a first-party cookie __qca which seems to be set by Quantcast.
I'm sure this is just used for tracking, but I can't find this ...
2
votes
0answers
87 views
Google Analytics cookie across SagePay checkout
We use SagePay's Server integration for our online payments. We use Google Analytics to track activity on our website and Google Ecommerce tracking to log transactions.
In Google Analytics, under the ...
2
votes
2answers
129 views
Cookie Audit help needed [closed]
Can anyone recommend any decent cookie audit plugins for firefox or chrome
I can see the typical google cookies on the site but I am struggling to find out what a couple of the other cookies actually ...
1
vote
1answer
79 views
Cookie data transfer
The context is a third-party analytics service, specifically Quantcast, but the inquiries are more general in nature. Please forgive and correct me if any of my assumptions are off, and thank you in ...
1
vote
1answer
570 views
Enforcing a specific order for cookie headers
We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders
So we ...
1
vote
1answer
296 views
Do iframes have access to the cookies of the hosting domain?
We want to build an ad-frame which will run on external sites (e.g. YYY.com). The external site will place an iframe to our site (ZZZ.com/ourAdContent.html) and we will show some ads in this frame. ...
1
vote
1answer
47 views
Empty Cookie based on IP address
Is there a way to empty a previous cookie based on source ip?
I need this to be done because of loadbalancing issues.
regards
Geert
1
vote
1answer
110 views
Making one exclude cookie for multiple google analytics sites
I've got multiple sites all with different google analytics profiles in them (managed under one account).
I would like to exclude everyones traffic in the office from all the sites. To do this when ...
1
vote
2answers
293 views
Temporary redirect needs to detect the URL of original page request from a search engine then redirect again to that page
I've tried searching this an innumerable amount of times with different word combinations, can't seem to crack it. Apparently I do not know the right terms in this situation.
When you come to my ...
1
vote
2answers
151 views
cookie not being sent when requesting JS
I host a webservice, and provide my members with a Javascript bookmarklet, which loads a JS sript from my server. However, clients must be logged in, in order to receive the JS script. This works for ...
1
vote
0answers
31 views
how to set secure flag on cookies generated from a python application
I have an application (written in python) placed behind apache and ssl. I am not seeing a secure flag on my cookie.
apache
Server version: Apache/2.2.15 (Unix)
I have added a configuration line to my ...
1
vote
0answers
40 views
Cookies Audit help [closed]
Someone can explain to me what is the purpose of these cookies? I'm doing a cookies audit and I didn't find anything on the web
Domain: google.com(google maps), Name: NID
Domain: google.com(google ...
1
vote
2answers
166 views
Cookie manager php
i own a joomla commerce store and although i use Google Analytics in order to track visis, i need to install a cookie manager in order to be able to track cookies that were installed on customer when ...
1
vote
2answers
217 views
Can search engines change language and read the cookie?
I am building a multi language website in PHP and prepared all my strings in English by default using gettext()
My locale/it_IT/LC_MESSAGES/default.mo file is working correctly and now I need to sort ...
1
vote
0answers
549 views
Google Analytics: 300% direct traffic increase - due to load balancing or tracking code change?
Last Wednesday we changed the domain name of the Analytics cookie used on our online retail site to be able to better track our outsourced on-site search.
Following some discrepancies in the traffic ...
0
votes
1answer
291 views
How to use apache mod-rewrite to remove trailing semi-colon on cookie?
We have the following cookie set by a product:
Set-Cookie: SSOCookie=T7ngsCmzC2FEq5p2a7o%3D; path=/; domain=.demo.com;
We would like to use Apache to remove the trailing ; which doesn't match the ...
0
votes
1answer
99 views
How to Track Visitors Comming from Adwords and Disable form fields that is not on landing page
There is a lead form on my website where we track from which source visitors have arrived. I wanted to disable the drop down and auto populate it with predefined data if the visitor is from adwords. ...
0
votes
1answer
406 views
Verify 2 cookies with mod_rewrite before serving images
I have the following mod_rewrite rule, which works fine in my Apache 2.x on CentOS 6 Linux machine, but is not complete:
RewriteCond %{HTTP_COOKIE} !id
RewriteCond %{REQUEST_URI} ...
0
votes
1answer
31 views
How can you set cookieless subdomain with Quantcast
I have correctly setup Google Analtycis so GA is not setting cookies for my subdomain. I mean for my static subdomain. But Quantcast is setting. What i wonder is can i prevent Quantcast to set cookie ...
0
votes
1answer
78 views
Apache server not able to read cookies from Browser
I have developed a login authentication page using cookies (with spring security) where for the first time, the user will need to get itself authenticated. Once the user gets successfully ...
0
votes
0answers
131 views
Auto Login Problem [closed]
I finally found my balance in getting auto login using cookie but I encountered a problem. Whenever I test the login with auto login checked. I close the browser and reopen it to test if it works. The ...
0
votes
0answers
57 views
Cookies Audit, Google Maps and Tripadvisor [closed]
I'm doing a cookies audit for a website, they asked me more information about Google Maps cookies.
I tried to search something on the web, but it was useless.
The same also for Tripadvisor cookies.
...
0
votes
0answers
56 views
EU Cookie Law Clarification [duplicate]
Possible Duplicate:
Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?
Does the EU cookie law apply to an EU site that is hosted outside of ...
0
votes
0answers
48 views
EU Cookiee Law - Should I be worried? [duplicate]
Possible Duplicate:
Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?
Given that the year-long "grace period" is up in a day or two, I'm ...
