Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #3306

Re: Secure cookies prevent login in PHP/Zend

From Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups comp.lang.php
Subject Re: Secure cookies prevent login in PHP/Zend
Date 2011-10-04 19:36 -0400
Organization A noiseless patient Spider
Message-ID <j6g59e$56u$3@dont-email.me> (permalink)
References <b3eb8f0e-122f-4d1d-9be7-7cd821a725d5@i14g2000yqg.googlegroups.com> <j6fond$c1j$1@dont-email.me> <4120d619-36c2-431d-89a3-451db34f4360@20g2000yqq.googlegroups.com>

Show all headers | View raw


On 10/4/2011 5:12 PM, nick wrote:
> On Oct 4, 4:01 pm, Jerry Stuckle<jstuck...@attglobal.net>  wrote:
>> On 10/4/2011 3:23 PM, nick wrote:
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>> Has anyone used the directive session.cookie_secure when also using
>>> Zend_Captcha_Image? When enabled, every time I try to login it fails.
>>> Essentially each request is treated as a new session, therefore
>>> failing the captcha verification even when I type it in correctly. I
>>> have been using Zend_Captcha_Image for several months without any
>>> problems and when the session.cookie_secure directive is removed, it
>>> works fine.
>>
>>> I have tried just using the session.cookie_secure directive in the
>>> php.ini file. (this is not how I'm doing it now, but I included it
>>> here so you know).
>>
>>> Currently I'm calling Zend_Session::setOptions(array('cookie_httponly'
>>> =>    true, 'cookie_secure' =>    true )); in the application bootstrap. I
>>> have turned on&    off resources.session.cookie_secure = true to no
>>> avail.
>>
>>> Does anyone have any ideas?
>>
>> Are you using a secure request (https) for your page?
>>
>
> It is failing for both http&  https requests.
>
> Thanks.

Are you sure you're using https throughout?  It works for me as long as 
the page requests are *all* using it.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Secure cookies prevent login in PHP/Zend nick <schitroc@gmail.com> - 2011-10-04 12:23 -0700
  Re: Secure cookies prevent login in PHP/Zend Jerry Stuckle <jstucklex@attglobal.net> - 2011-10-04 16:01 -0400
    Re: Secure cookies prevent login in PHP/Zend nick <schitroc@gmail.com> - 2011-10-04 14:12 -0700
      Re: Secure cookies prevent login in PHP/Zend Jerry Stuckle <jstucklex@attglobal.net> - 2011-10-04 19:36 -0400
        Re: Secure cookies prevent login in PHP/Zend nick <schitroc@gmail.com> - 2011-10-05 08:30 -0700

csiph-web