[ic] Losing value of scratch variables!

Michael Stearne interchange-users@interchange.redhat.com
Fri Jan 25 11:17:01 2002


cfm@maine.com wrote:

>On Fri, Jan 25, 2002 at 09:11:32AM +0100, Frederic Steinfels wrote:
>
>>On Fri, 25 Jan 2002, Michael Stearne wrote:
>>
>>>I have some scratch variables that I set throughout the site.  All 
>>>variables remain intact and set as long as the user doesn't go to the 
>>>secure area.  Is there any way to share or set scratch variables 
>>>between the non-secure and secure area of the site?
>>>
>>>You can see the example at by going to http://em.feamerch.com/ which 
>>>redirects to www.feamerch.com and then sets a scratch variable.  That 
>>>is retained when clicking around.  But if you then click "Log In" at 
>>>the top of the page which sends you to the secure server, the scratch 
>>>variable is lost (you can tell by the image in the top left changing 
>>>to an R).
>>>
>>>Any ideas.... besides setting a cookie and putting CookieDomain 
>>>
>>CookieDomain DOES NOT WORK! All currently available webbrowsers disallow
>>setting a cookie on a domain different than the one you are visiting right
>>now. You can not set cookies for other domains!!!
>>
This is not another domain this is another subdomain under SSL. 
 www.feamerch.com and secure.feamerch.com

>
>huh? 
>
>CookieDomain .maine.com  # for www.maine.com,  ssl.maine.com,  
>
>Same CookieDomain would work for foo.bar.maine.com 
>
>--
>
>Keeping session is what cookies are for.  If you are jumping to a
>secure server in a different domain, SOL.
>
I thought IC also uses scratch variable for session info.  I thought 
they would be the preferred way for IC.

Thanks,
Michael

>
>>Do not use different domainnames for secure and insecure domains unless
>>you want to apply a lot of patches to the interchange sourcecode.
>>
>>>.feamerch.com in catalog.cfg... that may not work because the scratch 
>>>variables are used setting [seti]
>>>
>>Regards
>>
>>Frederic
>>
>>_______________________________________________
>>interchange-users mailing list
>>interchange-users@interchange.redhat.com
>>http://interchange.redhat.com/mailman/listinfo/interchange-users
>>
>