Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Cookie domain  (Read 5165 times)

0 Members and 1 Guest are viewing this topic.

Sonya*

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Cookie domain
« on: August 04, 2008, 12:31:08 pm »

It would be very helpful if there were possibility to define cookie domain in Administration Panel of Coppermine. It would help to solve a lot of problems while integrating with other applications.

What is needed:
1. Additional field in Configuration panel where the value can be set
2. Pass the value to $CONFIG['cookie_domain']
3. Change in files:
  • addfav.php
  • bridge/coppermine.inc.php
  • include/fiunctions.inc.php
  • logout.php (2 times)
  • profile.php
  • thumbnails.php
the function setcookie (...) . Just add the 4th parameter (..,$_CONFIG['cookie_domain']) to the function.

Is it something you can implement this way?


Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: Cookie domain
« Reply #1 on: August 04, 2008, 01:19:25 pm »

What should be the use of a cookie domain? Describe what you're rying to accomplish instead of demanding additional settings.
Logged

Sonya*

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Cookie domain
« Reply #2 on: August 04, 2008, 01:41:01 pm »

I integrated login to coppermine and 5 other applications via SOAP (single-sign-on). While logging into coppermine (via SOAP) cookies are passed to SOAP client where they set with setcookie() function. All cookies are set to ".mysite.com" homogeneously. But when I call gallery pages two additional (and identical) cookies are added to domain "www.mysite.com". In other applications I can define domain cookie to avoid such behaviour, but in Coppermine I have to go through all files where cookies set and add cookie domain.

That's all. If it is such a difficult feature to implement, please forget about it.
Logged
Pages: [1]   Go Up
 

Page created in 0.015 seconds with 20 queries.