[Tickets #6910] Re: Horde requires cookies

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6910
-----------------------------------------------------------------------
  Ticket             | 6910
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Horde requires cookies
  Queue              | Horde Base
  Version            | HEAD
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
-----------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2008-06-16 03:38) wrote:

> We could probably check the
> configuration if cookies are turned off completely, instead of trying
> to send the cookie and verifying whether we get it back. But I still
> don't see why this is an issue.

You are right, probably not a high issue.  But it *is* an issue  
because our documentation is incorrect.  I turned off cookies and  
spent an hour trying to figure out what the hell was going on because  
Horde sends the exact same cookies no matter what the use_only_cookies  
setting is.

Even worse, logins broke at least once - because Horde sets the cookie  
but then later does a check if 'use_only_cookies' is false to see if  
the cookie is set (in Horde::url()).  If it is set, then no session ID  
information is passed through the URL.  Can't remember exactly how i  
broke, but it wouldn't let me login until I cleared all cookies from  
the browser.