Products

Solutions

Resources

Partners

Community

About

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStoreManaging Cookies on one siteManaging Cookies on one site
Previous
 
Next
New Post
7/2/2007 12:07 PM
 
I have a 04.03.07 site that has a link to a third party secure site to reserve resources. The behavior I see with some limited troubleshooting (me over a few days) is that when I have more than one dnn cookie the third party site's Secure certificate fails to load. One cookie or less from DNN allows the process to work, but if I have user@domain.com and user@www.domain.com the third party's site cert won't load.

I have read that setting HttpOnly to false may help but cannot test it for a couple of hours (power outage - anyone wish they were me?) and I am hesitant to actually leave false as the HttpOnly attribute for security reasons.

I have also tried redirecting and found a 301 from my DNN site to another domain prevents the crumb from dropping but I cannot permanently redirect the page to itself; or other versions of the domain without creating a loop.

Is there a way that DNN can be forced to always load www.domain.com or another way to manage the cookie?
 
New Post
7/2/2007 2:28 PM
 

This can be done--I use Thomas Thorpe's SSL module on my site to do this.  I know that you don't have the SSL cert in your site, but Thomas's module has an option to forward all traffic from http://domain.com to http://www.domain.com/

I don't know whether it would prevent a cookie from being dropped, but I expect it would.

Thomas Thorpe's SSL Module

I expect you could do the same thing with one of the 'conditional' modules that only shows/executes when a condition is true.

A third thing you could do is only have the www domain assigned to DNN and set up a permanent redirect on the WWW-less domain.  You'd need control of IIS on your server to do this, though.

Tim


Add a time zone display to your website!
MyDNN TimeZones
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStoreManaging Cookies on one siteManaging Cookies on one site


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out