Should I include underscore in session cookie name?

Question

I'm curious if there is anyone using Laravel since version 3 running into problems setting cookies in various version of IE when there is an underscore in the cookie name.

I came across this problem with my project (an eCommerce site built on CI). The problem was fixed removing the underscore in cookie name.

While I'm currently porting the project to Laravel, I just want to check if I should remove the underscore from session cookie as well.

score 8 · Accepted Answer · answered Feb 22 '13 at 03:24

8

I would definitely recommend removing any underscores from your cookie name, I've been caught out by this a few times in the past whe, and it's easy to pull your hair out trying to figure out what's going on when in the end it's the little underscore gremlin

answered Feb 22 '13 at 03:24

duellsy

8,497
2
36
60

Thanks for the feedback. I shall follow PHP style by naming cookie similar to PHPSESSION, without underscore. Thanks. – Edwin Aw Feb 22 '13 at 03:37
1

Unfortunately, I fails to see way to close this question. I tried to vote up your answer and it said I need 15 reputation to do so. I have only 6 at the moment, I'm new here :-) – Edwin Aw Feb 22 '13 at 07:20

score 1 · Answer 2 · answered Feb 22 '13 at 03:27

1

It's better practice to use periods instead of underscores in cookie names.

answered Feb 22 '13 at 03:27

Lee Ginger-Ninja McCarthy

186
3
4
14

Periods in name part get converted to underscore by php on read. – Johan Dec 29 '13 at 12:42

score 0 · Answer 3 · answered Feb 22 '13 at 06:11

0

Basically you dont need the underscore - so just remove it. Why have a risk at all, when you can have zero risk by removing it :)

answered Feb 22 '13 at 06:11

Laurence

58,936
21
171
212

Should I include underscore in session cookie name?

3 Answers3

Linked