Questions tagged [cookie]

42 questions
1
vote
1 answer

if not cookie set in nginx

I wanted to restrict access to our downloads section. If users/bots wants to download file without logging in they will see 403 error. Logic is wonderful but it turned out very ugly code location /downloads/ { set $banforcookienotset 1; if…
nerkn
  • 195
  • 2
  • 10
1
vote
0 answers

I'm struggling to configure varnish to account for language cookie

I'm fairly new to the varnish cache world and I need to optimize a Wordpress application that is pretty slow. I made a lot of research today and I made some progress but I'm stuck with the configuration for language cookies. So, the application sets…
Luca
  • 11
  • 1
  • 1
  • 3
1
vote
1 answer

How to use a hyphen in cookie names for nginx?

I want to use the new cookie-prefixes, which are not yet standardized by the IETF. These are __Secure- and __Host-. So let's e.g. set this cookie (here the header returned by the server): Set-Cookie: "__Host-apple=yummy; Secure; HttpOnly; Path=/" I…
rugk
  • 506
  • 2
  • 6
  • 18
1
vote
2 answers

Curl receives expired cookies

Why does curl receive an expired cookie? In a response to some url the server is sending a 302 Found response and a cookie. In Firefox this cookie gets set seamlessly. Firebug says: Set-Cookie …
Alex
  • 2,357
  • 5
  • 32
  • 41
1
vote
0 answers

php session tracking cookies (multiple session handling on same domain)

I have 2 applications, both have password based login, database,etc., the passwords are different, databases are different, applications present are in different folders. Log into the first application at example.com/abcd. Username: admin,…
Corleone
  • 121
  • 6
1
vote
1 answer

how to use varnish cache with set-cookie named mp3list and phpsessionid

I am new to php and i am interested to use varnish to improve site performance. I installed the latest version of varnish: 4.0.2 varnish HTTP/1.1 200 OK Date: Sat, 06 Dec 2014 07:24:47 GMT Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29…
azarudeen
  • 31
  • 1
  • 4
1
vote
1 answer

IIS not sending ASP.Net cookies to IE10 (and only to IE10)

I have IIS 7.5 server running ASP.Net application, which for some reason doesn't send ASP.Net authentication cookies to IE10. This happens only when request comes in from IE10 browser and only over network (i.e. not when browsing from web server…
Cozzamara
  • 143
  • 2
  • 6
1
vote
2 answers

Multiple A record and session/cookie

For example I setup multiple a record for a domain abc.com 115.11.22.33 115.11.22.34 115.11.22.35 Is it true that if one browser successfully establishes a connection to one of the ip's, it will stick with this ip until it no longer…
user2122139
  • 145
  • 3
1
vote
1 answer

Nagios + check_http with header data

With cURL, I can successfully log into the website I want have Nagios test by passing --cookies. Something like this: curl --cookie "user=4reqrerqwr;userlogin=123adsfjlk324" http://mysite.com/home/index.aspx -v | grep Welcome I know it is successful…
af-at-work
  • 670
  • 1
  • 6
  • 12
1
vote
1 answer

trac: keep trac_auth cookie after web browser closes

Is there a way to set how long the trac_auth cookie should live, so that I may stay logged in even after closing the web browser? From what I can see now, it is set to be deleted at browser exit. I use a standard installation of Trac.
Frank
  • 11
  • 1
1
vote
1 answer

How to enable/disable mod_deflate based on a cookie?

I would like to enable mod_deflate based on the presence and value of a certain cookie. I know it’s possible to do cookie manipulation and tests with mod_rewrite, but I’m not sure how to do that kind of stuff with mod_deflate. Is this possible at…
Mathias Bynens
  • 716
  • 1
  • 10
  • 15
1
vote
1 answer

How do I add the __Secure prefix in this .htaccess line?

Sorry, I'm not an Apache expert. I need to add the __Secure prefix to this htaccess line: Header onsuccess edit Set-Cookie (.*) "$1; SameSite=Strict; Secure" is this possible? How?
1
vote
1 answer

Clicking a Google query link logs user out of session

I have a curious situation with my NodeJS server: it seems like searching for the website on Google signs out the user. The homepage is https://emocoes.org/pt/inicio. I sign in to the website and the homepage shows the version for users, such as a…
miguelmorin
  • 249
  • 1
  • 5
  • 13
1
vote
0 answers

How can I get HAProxy to override / standardise the assignment of a cookie across multiple backends?

I am running HAProxy version 2.0.12 2019/12/21 - It hosts multiple backends. In the web layer, I have a persistent cookie which just contains a GUID and is meant to be super-long lived (50 years, but can be any large value). It needs to be set in a…
Jon Rea
  • 111
  • 4
1
vote
1 answer

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { proxy_cookie_path ~(.*) "$1; SameSite=none; secure;…
Georg
  • 11
  • 1
  • 2