Re: [cgiapp] CAP::Authentication & cookies

[RA Jones <suppressed>]

Ron Savage wrote:
> On Mon, 27 Mar 2006 20:38:22 +0100, RA Jones wrote:
>
> Hi RA
>
> > is always required irrespective of store method? Is there any way
> > round this save the horrible kludge of passing the parameter as an
> > embedded hidden form field or tacked onto the end of clickable
> > links?
>
> Aren't you being a teensy bit fanatical on this one? Hint: The correct reply is 
> Yes, I am.
>
> A method which works, eg form fields, is always going to be better than one 
> which fails, eg non-functioning cookies, even if the later was chosen for the 
> most fanatical of reasons :-))).
Hi Ron,

Not sure I'm with you there - I *want* to use CAP::Authentication, but 
as far as I can tell will be thwarted if the user blocks cookies, even 
though I use the MySQL session store option. Manually setting params in 
forms/urls seems a regressive step to me - what I used to do before I 
found CA and its plugins. Not fanatical surely?

In fact the situation is a little more complicated than I originally 
painted (for reasons of brevity) - I have embedded my app in a frame 
from another site (which I control of course) as my app doesn't have its 
own domain name, and is really part of my other site's content. The 
problem comes with Internet Explorer which on default settings does not 
permit 3rd party cookies, unless said site sets a privacy policy, which 
itself seems a rather complex process. But end result is the same - 
browser refuses my cookie.

I know I can mitigate against this by instructing all users to set my 
site as a trusted zone, or to permit 3rd party cookies, or even to use a 
'proper' browser in the first place, but was hoping for a simpler 
solution where I can have my cake and eat it ;-)
--
Richard Jones
Leeds, UK
mailto:suppressed

---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
             http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed