I've like to disable as many cookies as I can for the default EE2 install. The following cookies are being set but with the new GDPR laws I don't want to have to list this in the cookies page so I would just rather turn them off for everyone.

These are the default cookies set. I can't see a way to disable them.






It is possible if you put your admin.php file in a subfolder and use a cookie path that is equal to the name of the subfolder.

Cookies will then only be set for the CP and you still will be able to login.


Let's say you name the cp-folder "maskedcp" and you put your admin.php file in that folder. Then you have to edit the index.php and admin.php.

After that navigate to Admin -> Security & Privacy -> Cookie Settings

Set the cookie path field to "/maskedcp" (without the quotes)

  • The aforementioned cookies will still be set for any anyonymous website visitor. Personally I found no other simple way than hacking the core to stop that.
    – user1013
    May 16 '18 at 18:33
  • @user1013 Which core files did you hack or how did you go about find the locations to hack? May 17 '18 at 8:49
  • /system/expressionengine/libraries/Session.php /system/expressionengine/libraries/csrf/Cookie.php
    – user1013
    May 24 '18 at 11:21
  • Look for: ee()->input->set_cookie
    – user1013
    May 24 '18 at 11:31

From my understanding cookies that are essential to website operation are NOT covered under the GDPR. It's only if you are using it for analytics is there an issue.

The 'exp_tracker' cookie for example is needed to return a user to the previous page (or 2) by EE in some instances. As long as you have all the tracking items turned off in EE even that cookie is considered essential.

EE cookies aren't really your issue under the GDPR, analytics, media embeds, adverts... (3rd party stuff) are the issues to deal with.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.