PDA

View Full Version : POLL: Does your page work with cookies disabled?


Vege
09-13-2007, 12:01 PM
Simple question.
Would u rely page functionality on cookies?

BillyGalbreath
09-13-2007, 12:12 PM
I only use cookies to "pick up" where php sessions leave off for my sites' login functionality (if the user has chosen the "remember me" option during login process). Login still works fine, but session will end after 15 minutes of inactivity since the cookies wont be there to keep you logged in.

Other than this, cookies are useless for me. ;)

Vege
09-13-2007, 12:21 PM
I only use cookies to "pick up" where php sessions leave off for my sites' login functionality (if the user has chosen the "remember me" option during login process). Login still works fine, but session will end after 15 minutes of inactivity since the cookies wont be there to keep you logged in.

Other than this, cookies are useless for me. ;)
As i know your a php man, do you think this works without cookies turned on?
<?php
session_start();

echo $_SESSION['t'];

if (!$_SESSION)
$_SESSION['t'] ="wii";

?>

BillyGalbreath
09-13-2007, 01:39 PM
Well - the session has nothing to do with cookies, so yes, although I would echo that var after the if statement.

Vege
09-13-2007, 03:17 PM
you might wanna try the functionality of the code with cookies disabled.
This ofcos if you havent done alterations to your php.ini

BillyGalbreath
09-13-2007, 04:51 PM
http://login.pl3x.net/

Try it yourself. My login system does not require the use of cookies. Cookies are only used if the "remember me" option is checked during login.

The cookies are only used for those people wanting to stay logged in after the session has died (i.e., browser window closed, or 15 minutes of inactivity, etc).

BillyGalbreath
09-13-2007, 05:04 PM
OMG - just checked it out... IE7 blocking all cookies totally kills my login system... I log in, it gives me the "ok" that i have logged in, but then i'm magically not logged in... Thats wicked nasty...

Can I change my vote from yes to no? lol!

Do you know of a way to fix this?

BillyGalbreath
09-13-2007, 06:42 PM
Upon firther investigation, I came across this (http://www.webmasterworld.com/forum88/8216.htm) but it didn't end well :/

Further investigation needed..

Juparis
09-15-2007, 07:45 PM
Heh, yea, that's partially why I never "up"graded to IE7. (the other part is because I'm lazy)
I keep IE only to access the pages that absolutely die without cookies.

I never rely on cookies because I hate them myself. It's annoying, though, when the popular sites like AOL and GMail require me to disable my firewall altogether before I can continue. X_X
I mean, sure I could loosen up my security features, but I'm paranoid and prefer things this way. Not a cookie gets through, unless I specifically "need" it to. ;)

Vege
09-16-2007, 06:54 AM
PHP Session matter has nothing to do with browser.

Amox Grine
09-21-2007, 11:33 PM
Guest access to my website works perfectly (In fact, i don't even try set a cookie). But I don't even bother trying to accommodate people without cookies on the logged-in section of my website. Waay too hard maintaining sessions with URLs. Too easy to screw up, too.

Well - the session has nothing to do with cookies, so yes, although I would echo that var after the if statement.

Huh? How do you think it is persistent? Yes, it can use its GET PHP_SESSION or w/e, but that's just a fall-back.

BillyGalbreath
09-22-2007, 12:37 AM
...Huh? How do you think it is persistent? Yes, it can use its GET PHP_SESSION or w/e, but that's just a fall-back.

If you have kept reading my following posts you would have realized that I did a little research and found out I was wrong, that my session _do_ depend on cookies... o_O

afterburn
09-25-2007, 09:53 PM
in .net you can use cookieless state management sessions. Basically the Url is modified to have the requested cookie.

http://site/cookie/default.aspx

its a quick and dirt way to keep your cookies. but the session management would be a pain.

who cares about cookies? unless they are attempting to store credit card info i see now issues with them ....

i use a FormsAuthenticationTicket that is encrypted Guid of the User Id in the db.