Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Hot answers tagged

7 votes
Accepted

Variable SSL and Cookies

Yes, the cookies are still susceptible to being intercepted. The full set of cookies for matching domains is transmitted by the browser with each page request to that domain, even if the original ...
user avatar
  • 1,232
2 votes

Disallowed Key Characters error when moving EE website to another server

This usually happens when there is a clash between the cookies. Give clearing your browser cookies, or at least delete the EE ones a try. A good way to thwart this is to set a unique cookie prefix/...
user avatar
  • 1,987
2 votes

Cookies failing with EE

<script type="text/javascript" src="jquery.js"></script> <script type="text/javascript" src="jquery.cookie.js"></script> This is likely your problem - you're calling your ...
user avatar
  • 17.4k
2 votes

exp_flash cookie being set for each channel entry

This turned out to be an issue with EE 2.8, MSM, and google maps for expressionengine. Updated Google maps module to 3.3.5 and all is well
user avatar
  • 198
1 vote

Block iframes (e.g. YouTube-embeds) - loading only after click?

It's not too bad! In the control panel Settings > Consent requests create a new request called "video_consent" or similar, this name is used in the consent form, example below. Now add ...
user avatar
  • 1,577
1 vote
Accepted

Cookie Plus reading cookies on first page load

The answer from witrin on this question (three answers down or so) is the reason why you you are having this problem. https://stackoverflow.com/questions/3230133/accessing-cookie-immediately-after-...
user avatar
  • 5,900
1 vote

How can I enable HttpOnly cookies in EE

For anyone else coming across this, ExpressionEngine 2.8.0 introduced a new config variable for httponly cookies, and it's set to 'yes' by default: http://ellislab.com/expressionengine/user-guide/...
user avatar
  • 4,885
1 vote

Switching 'views' with a cookie

Cookie Plus is fine, but if you happen to already be using Stash, it can handle this kind of thing using save="yes" scope="user" parameters (which essentially creates a cookie). https://github.com/...
user avatar
  • 4,885
1 vote

Switching 'views' with a cookie

Yes do it by setting cookie and then checking for the presence/value of the cookie and use the result to decide which layout to show (perhaps by using a conditional to use a particular embedded ...
user avatar
  • 7,176
1 vote

Can't log out of my site

I am getting the same thing. {path='logout'} does not work This finally ended up working. I use Solspace User, not sure if that is related.. <a href="{path='?ACT=16'}&XID={XID_HASH}">Log ...
user avatar
  • 195
1 vote

Login issues on front end - what to do now?

You say nothing has changed but something must have. Even if it's a change to the server set up (perhaps made by your host) it could have an effect. So it might be worth asking your host if any ...
user avatar
  • 7,176
1 vote

Where can I find the cookie_consent_module

You might want to try this link: https://github.com/yashiel/Cookie-Consent In mcp.cookie_consent.php, line 63 will have to be changed from… $this->EE->cp->set_variable('cp_page_title', $...
user avatar
1 vote
Accepted

Unable to change site multisite EE3

In your backend, under Settings > Security & Privacy choose CP session type to Session ID Only
user avatar
1 vote

How to set and get cookies in EE 3?

EE3 still uses the legacy Input library internally, so the same methods apply. ee()->input->cookie(); ee()->input->set_cookie(); ee()->input->delete_cookie(); Or, use the Cookie ...
user avatar
  • 17.4k
1 vote

Cookie-free subdomain

Not that I'm an expert, but what I've implemented in the past has been in .htaccess, not defining privacy settings in EE, until now I've not given it much thought... This answer gives some light - ...
user avatar
  • 5,353
1 vote

MSM specific config settings

You can use the $assign_to_config array in each site's index.php and admin.php files to set some per-site config items. (See docs.) But you might have better luck using a switch statement in your ...
user avatar
  • 17.4k
1 vote
Accepted

Setting and Getting Cookies

There's an add-on called Cookie Plus which makes setting and getting cookies via template tags very simple.
user avatar
  • 7,176
1 vote

Set Session Timeout on Front End of site

You can try Stay Up Forever It call "Forever", but based on code you can setup any session timeout in extension settings (for cpanel or/and user)
user avatar
  • 5,781
1 vote

XSS vulnerability - malicious cookie value

I just tested this (really quickly) on one of my sites running 2.8.1 and couldn't exploit the exp_csrf cookie in the way described by your report. However I could do it on your site using the exact ...
user avatar
  • 7,176
1 vote
Accepted

Not able to log into EE 2.9.0 when Cookie Consent is enable

I'm having this problem too. What I do is, um, refreshing the form. You may find this bug report useful
user avatar
  • 2,831

Only top scored, non community-wiki answers of a minimum length are eligible