Tickets :: Comment on [#6910] Horde still sends cookies when not using cookies for sessions

* Your Email Address
* Spam protection	Enter the letters below: .__ .__.. ..__ .__ [ __[__]\| \|[__)[__) [_./\| \|\|__\|\| \[__)
Comment	>> We could probably check the > >> configuration if cookies are turned off completely, instead of trying > >> to send the cookie and verifying whether we get it back. But I still > >> don't see why this is an issue. > > > > You are right, probably not a high issue. But it is an issue > because our documentation is incorrect. I turned off cookies and > spent an hour trying to figure out what the hell was going on because > Horde sends the exact same cookies no matter what the > use_only_cookies setting is. > > > > Even worse, logins broke at least once - because Horde sets the > cookie but then later does a check if 'use_only_cookies' is false to > see if the cookie is set (in Horde::url()). If it is set, then no > session ID information is passed through the URL. Can't remember > exactly how i broke, but it wouldn't let me login until I cleared all > cookies from the browser.
Attachment
Watch this ticket