Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 6
Impact
~3k people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Oct
25
comment Session cookie being dropped when moving under the SSL
... actually - I'd covered all those bases - but I think I've just solved it; and I think I may have done something a little daft ... You did point me in the direction of taking another, really good look at my session handling object though - thanks! :)
Oct
24
comment Session cookie being dropped when moving under the SSL
Might not have quite solved it ... but +1 on the Fiddler comment (I'd completely forgotten about it); there's definitely something strange going on as it seems the devSID cookie is being reset 3 times under the SSL shell - which shouldn't be possible as session_start() is called in a private constructor in a Singleton pattern!
Oct
24
comment Session cookie being dropped when moving under the SSL
Umm - no, basically. You can quite happily pass a cookie with the domain .mydomain.ext between https://secure.mydomain.ext and http://www.mydomain.ext - the worst that will happen is that something like McAfee Secure might report it as a low level security vulnerability (unencrypted cookie accessed in secure domain)... cookies aren't that clever.
Oct
21
comment Session cookie being dropped when moving under the SSL
Nope - it's something much stranger than that... I'm beginning to narrow it down to either something Windows XP specific or something to do with our office network - because it'll work fine on a Windows 7 machine outside this network I discovered last night; it might be some kind of domain conflict with our VPN to Holland but I'm not sure. I think this might turn out to be too case-specific to really be solved on stackexchange :\