Comments on: HTTP Only cookies in Firefox

By: Alex

Alex — Sat, 23 Jun 2007 22:03:30 +0000

Just found this post after searching the ‘net trying to find out why the Google Analytics code throws errors when used in IPB.

I understand being worried about cookies, but is this the right way to go about addressing these issues?

I’m sure I’m not the only one who has spent the better part of an hour trying to figure it out.

Perhaps fixing the back-end code to strip out unwanted input is a better idea?

Stefan Esser — Tue, 24 Oct 2006 21:23:48 +0000

Lewis — Fri, 06 Oct 2006 21:09:36 +0000

Won’t a simple eval get round this?

Wilhelm32 — Mon, 18 Sep 2006 04:16:39 +0000

Thanks for the heads up Scott. And thanks to Jelsoft for the patch (as well as for the update on vb 3.6!)

And Matt, well um..I guess thanks as well…

Lucky — Sun, 17 Sep 2006 00:06:36 +0000

lol

Scott MacVicar — Sat, 16 Sep 2006 23:33:50 +0000

We had HTTP Only cookies written before 3.6.0 was released, but as everyone knows untested code late in the release process is bad.

A patch was submitted to PHP on August 7th so that everyone could benefit from this.

So if anything Matt has blogged about a feature that Jelsoft helped to implement in PHP well over a month ago.

Hope that clears things up for all of you.

Zain — Sat, 16 Sep 2006 02:45:44 +0000

Haha, i so agree with that

James — Sat, 16 Sep 2006 02:26:46 +0000

oho “Jelsoft start your photocopiers!”

Don Wilson — Sat, 16 Sep 2006 01:51:17 +0000

I’m sure they have him on their rss feed readers

Zain — Sat, 16 Sep 2006 01:40:22 +0000

Aah, I see jelsoft releasing vb 3.6.1 on 13th sept with an implementation of HTTPOnly Cookie. lol :p