A small piece of data sent from a website and stored in a user's web browser.
1
vote
2answers
39 views
Disallowed Key Characters error when moving EE website to another server
I want to move an EE 4.3.5 website from a development server to a production server. In this purpose, I have applied the steps presented here in the EE documentation.
But, when I want to access the ...
1
vote
2answers
89 views
Where can I find the cookie_consent_module
Where can I find the cookie_consent_module. If I google it and follow the link, it get a 404.
0
votes
0answers
77 views
Cookie setting within a conditional not working as expected
{if "{exp:cookie:get name='test'}" == ''}
{exp:cookie:set name="test" value="a" expire="1209600"}
Here1
{if:else}
{exp:cookie:set name="test" value="b" expire="1209600"}
Here2
{/if}
...
0
votes
2answers
76 views
Disable EE2 cookies
I've like to disable as many cookies as I can for the default EE2 install. The following cookies are being set but with the new GDPR laws I don't want to have to list this in the cookies page so I ...
0
votes
1answer
33 views
Automagically or force logout after 60 seconds
I have an EE3x site that is running User, Cartthrob, Transcribe, CE Cache (there is a lot going on) and I need a way to be able to automagically log-out users after 60 seconds of inactivity.
The ...
0
votes
1answer
33 views
Cannot login to CP importing db
I'm using EE v .3.4.4 and have used a dump of the site's live database to keep my development machine in sync from time to time. This has not been a problem in this project until last week.
After ...
0
votes
1answer
36 views
Unable to change site multisite EE3
I have a multisite in my project but when I go to the cp and try to switch sites, the page simply refreshes and stays on the default site. When I open incognito in Chrome, login and try this again is ...
1
vote
0answers
54 views
How to stop users being auto logged out after about 3 or 4 hours
Users of our site ( EE 2.9.2 ) are being randomly logged out after 3 or 4 hours.
I have checked cookie viewer in chrome and firefox, and “exp_sessionid” and “exp_expiration” are being set correctly ...
0
votes
1answer
250 views
How to set and get cookies in EE 3?
I have found how to set/get browser cookies using older versions of EE (1&2) and can obviously do this also in EE 3 using legacy functions/libraries.
How would I do this in EE 3 NOT using legacy ...
0
votes
1answer
507 views
Cookie-free subdomain
I created a subdomain with redirects for my site images at images.domain.com in order to avoid cookies.
Based on my read of EE documentation, I should go to Admin / Security and Privacy / Cookie ...
1
vote
1answer
35 views
log in to EE with wildcard subdomains
I have a unique scenario in that I'd like to log into a single EE site but with a wildcard subdomain.
for example:
dev.example.com
staging.example.com
fishfood.example.com
anything.example.com
*....
1
vote
1answer
455 views
Setting expiry length of login cookie
Is there a way to set the expiry time of the login cookie for users on the front end of an EE site?
I know there are hidden config variables for user_session_ttl but they don't seem to work if the ...
0
votes
1answer
93 views
How do I automatically switch to a user's language upon first visit while still being able to switch to other languages?
I'm currently working on a project where the website has two languages, Dutch and English. I've set up my root index.php to have Dutch set as default language and an index.php in /en/ is pointing it ...
0
votes
1answer
72 views
MSM specific config settings
Is it possible to only target specific MSM sites, as opposed to all sites.
I have two subdomains and a www site using the same MSM installation.
Is it possible to share a cookies between sub1....
0
votes
1answer
261 views
Setting a global session cookie path
I'm seeing PHPSESSID set at /members/ when I have $config['cookie_path'] = '' (also tried $config['cookie_path'] = '/').
Shouldn't this config ensure all session cookies are set at the root path? I'...
0
votes
1answer
78 views
User not logged out when browser closed
This is on EE 2.10.1.
Website Sessions are set to Cookie Only.
$config['sess_expiration'] = 1440;
$config['sess_expire_on_close'] = TRUE;
phpinfo() reports session.gc_maxlifetime of 1440;
User ...
1
vote
0answers
151 views
Response header too large
The response header for one of my pages is too large, some browsers to throw a 500 error, and preventing me from using W3C HTML validation:
http://example.com/water-softener-reviews
I have a (very ...
0
votes
1answer
157 views
Setting and Getting Cookies
Are there any preferred ways of setting and getting cookies in EE? Whether through an add-on or a PHP snippet?
Need to set a location cookie based on user input and get the cookie within my templates....
1
vote
0answers
91 views
after upgrading to EE 2.9.0 any valid user login attempt to CP or front end is not sucessful
I've seen posts like this but I've reached a dead end, can anyone help ?
Post upgrade from 2.8.1 to 2.9.0
logging in as front end user:
First thing I see is that "S=0" is prefixed before the template ...
1
vote
1answer
267 views
Set Session Timeout on Front End of site
I'm currently working on a site with a small members only section. My client would like to limit session length to 15 minutes. The time limit is for the front end of the site NOT the cp.
Is this ...
2
votes
2answers
162 views
XSS vulnerability - malicious cookie value
One of the sites I'm working on was subject to a penetration test and this is one of the items of feedback:
I understand the issue in theory however as I've never had to deal with this sort of thing ...
0
votes
2answers
133 views
Not able to log into EE 2.9.0 when Cookie Consent is enable
I've recently updated a site from EE 2.7.3 to 2.9.0. A client has pointed out to me that she can't log into the CP but instead get's the message:
This form has expired. Please refresh and try again.
...
3
votes
2answers
357 views
Variable SSL and Cookies
Let's say I have a membership site, and my login page & form are served with SSL: https://mysite.com/member/login.
<form action='https://mysite.com' method='post' class='login'>
<!-- ...
0
votes
0answers
24 views
Moved EE 2.8.1 to new server cannot log-in [duplicate]
I guess that technically I am not moving to a new server, but rather a new installation to create a dev environment to work on before pushing to prod site. I have followed instructions here several ...
0
votes
1answer
70 views
Cookies failing with EE
I've got the following code working on a static page, but it does not work with EE. Could anyone tell me why?
CSS
.contentB {display: none;}
HTML
<div class="contentA">
<h1>Sign ...
1
vote
2answers
65 views
Switching 'views' with a cookie
On a site I'm working on, I've got a lists of projects. These lists have two views: a thumbnail and a text-list view. On each page, there's a button to switch to the other view.
I'd like to make that ...
1
vote
1answer
187 views
Can't log out of my site
I can't log out of my site's front end. When I try to do so, I get the following message:
The following errors were encountered
• You are not authorized to perform this action
If I delete my ...
0
votes
2answers
258 views
Login issues on front end - what to do now?
Situation:
Expression Engine v2.6.1 - Build Date: 20130506
I have a live server and a dev server. They are identical.
The problem
On the live site, members cannot login on the front end. I can ...
1
vote
1answer
118 views
exp_flash cookie being set for each channel entry
I have a CE tag that seems to be setting the exp_flash cookie to the entire contents of each entry output within the loop. This leads to an error in chrome, where the header ends up being too large.
...
0
votes
1answer
189 views
unable to access to CP after setting cookie domain
Help! I was just trying to setting the cookie domain inside the CP > Admin > Security and Privacy > Cookie Settins
(as explained here Cookie Settings)
and now I can't login to the CP admin :(
how ...
0
votes
1answer
35 views
although logged in, no access to off line site, EE thinks I am not logged in
Although I am logged in a s superadmin, I do not get access to a site that is offline. Klicking on the site name link, I get
To proceed to the URL you have requested, click the link below:
http://...
2
votes
1answer
292 views
How to prevent EE and CartThrob setting cookies for anonymous users?
I'm trying to set up Varnish to cache certain static pages on my site for users who have not logged in or added anything to their cart.
Basically, Varnish will check whether the user has any cookies ...
2
votes
2answers
838 views
Control Panel Login Timeout issues
I'm on EE 2.7 and clients are complaining of short logout times.
I’m forced to re-log into EE within 20-30 minutes of non-usage even though you’ve set the timeout to 8.3 hours.
My current ...
2
votes
1answer
309 views
Cartthrob cart isn't properly tracking sessions or cookies/Can't add to cart on Ubuntu 12.04
Our setup
We were previously running a load balancer with a 4gb cloud server and 4gb DB server on the Rackspace Cloud. We were using Ubuntu 10.04 + PHP 5.3.2, EE 2.7.2 + Cartthrob 2.4. Everything was ...
2
votes
1answer
72 views
Logged in members - account sharing
Is there a way to see whether a currently logged in user account is being used on more than one machine concurrently? I'm trying to find out whether users are sharing their usernames/passwords, as I ...
1
vote
0answers
117 views
Cookie Consent Module locked me out
I've done something a little silly, I've been trying to put cookie consent module into a site. Somehow I've activated it, but I have no way to accept cookies and I cannot now log into the admin area ...
2
votes
1answer
153 views
Control Panel locking me out after uploads and template changes - says no data
Prolem:
I am using ExpressionEngine Core 2.6.1. After I click around the control panel for a bit, sometimes updating templates and sometimes uploading images, I get kicked out. When I get kicked out, ...
1
vote
4answers
1k views
Using Plugin Tags Within Channel Tags
I have a plugin that allows you to set and store cookies using EE tags (so you don't have to enable PHP in your templates).
Unfortunately, I can't get the tag to parse the cookie value within a ...
1
vote
1answer
393 views
Incrementing Value in Cookie
I've got Cookie Plus and Mo' Variables installed. I'm trying to set, get and increment a value in a cookie. Here's my test script:
{if "{exp:cookie_plus:get name="aa_seq"}" == ""}
{exp:cookie_plus:...
3
votes
1answer
78 views
How can I get a site running under MSM (not the 'default_site') to recognise that I'm logged in?
I have a Multi Site Manager set up running 6 sites from a single EE installation.
I am trying to troubleshoot a problem on one of the sites and have turned on template debugging but it doesn't get ...
4
votes
3answers
2k views
Keep Getting Logged Out of Control Panel
I keep getting logged out of the control panel while I'm working in it.
Under Admin > Security & Privacy > Security and Session Preferences, I have:
Control Panel Session Type: Cookies & ...
3
votes
1answer
136 views
EE cookies add leading dot to domain name
Even though I add my domain name without the leading dot in the EE cookies admin panel, the cookies are still served with the leading dot attached. Because of this, they are sent to my subdomains. Any ...
2
votes
1answer
430 views
Cookies appear to ignore subdomain restrictions? (EE1)
Ok, I've got my primary site running EE1 at www.example.com. I've set up a subdomain of static.example.com, from which I want to serve static assets; specifically, files that don't need cookies being ...
3
votes
2answers
106 views
Forum users report being logged out even after checking 'keep logged in'
We are currently running EE 2.5.2 and using the Discussion Forum Module (3.1.8). We have several users who report that they are logged out even when they have checked the 'keep logged in' option. We'...
3
votes
2answers
536 views
EE 1.7.0 cookie and login issue (disallowed key characters)
Quite out of the blue on a client site running 1.7.0, all pages loaded after the initial visit rendered the dreaded "Disallowed Key Characters" message.
Upon some investigation, I determined it was ...
3
votes
2answers
266 views
maintain logged-in status across sub-domains?
Is there a way to maintain logged-in status across sub-domains? I've tried adding a cookie prefix in config.php to no avail... not sure what else to try.
James
6
votes
3answers
339 views
Remove Cookies Allowed Default EE Message when using Cookie Consent Module
I have recently installed the Cookie Consent Module on a recent EE site build,
and have added an allow cookies link (ie. {cookies_allowed_link} ) to a policy banner at the top of the site.
My ...
6
votes
3answers
690 views
Display a message on visitors first visit
I am wanting to display a message when a visitor lands on the site for the first time.
I don't necessarily want to use browser cookies, but would if thats the only solution.
Ideally, would I be ...
4
votes
2answers
2k views
Log out upon tab/window close
I have an ExpressionEngine application that displays some financial information, and the client is requesting that the user is logged out upon closing a tab/window.
Is that possible?
I currently ...
8
votes
2answers
1k views
How can I enable HttpOnly cookies in EE
Update:
Thanks to Dom Stubbs, I have an extension to accomplish this now. It is up on devot-ee and also up on GitHub. Thanks Dom!
The Original Question
I am nearly through a security review of a ...
