Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 6
Impact
~3k people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Aug
13
awarded  Notable Question
Sep
24
awarded  Autobiographer
Sep
8
awarded  Self-Learner
Apr
5
awarded  Teacher
Apr
4
awarded  Popular Question
Oct
25
awarded  Scholar
Oct
25
accepted Session cookie being dropped when moving under the SSL
Oct
25
answered Session cookie being dropped when moving under the SSL
Oct
25
comment Session cookie being dropped when moving under the SSL
... actually - I'd covered all those bases - but I think I've just solved it; and I think I may have done something a little daft ... You did point me in the direction of taking another, really good look at my session handling object though - thanks! :)
Oct
24
comment Session cookie being dropped when moving under the SSL
Might not have quite solved it ... but +1 on the Fiddler comment (I'd completely forgotten about it); there's definitely something strange going on as it seems the devSID cookie is being reset 3 times under the SSL shell - which shouldn't be possible as session_start() is called in a private constructor in a Singleton pattern!
Oct
24
comment Session cookie being dropped when moving under the SSL
Umm - no, basically. You can quite happily pass a cookie with the domain .mydomain.ext between https://secure.mydomain.ext and http://www.mydomain.ext - the worst that will happen is that something like McAfee Secure might report it as a low level security vulnerability (unencrypted cookie accessed in secure domain)... cookies aren't that clever.
Oct
21
comment Session cookie being dropped when moving under the SSL
Nope - it's something much stranger than that... I'm beginning to narrow it down to either something Windows XP specific or something to do with our office network - because it'll work fine on a Windows 7 machine outside this network I discovered last night; it might be some kind of domain conflict with our VPN to Holland but I'm not sure. I think this might turn out to be too case-specific to really be solved on stackexchange :\
Oct
19
awarded  Student
Oct
19
asked Session cookie being dropped when moving under the SSL