IE6 disables third-party cookies by default, which is why your cookies would
not be getting set if displayed within a frameset (assuming the domain name
of your client site is different from your own).

You can get around this by placing a P3P header in your IIS configuration to
tell IIS to allow the cookies.  We have to do this on our ZonkBoard web site
(www.zonkboard.com, shameless plug) because the nature of the app is to sit
in an IFRAME on the user's site.  We use cookies within the app to store the
end user's name/url so they don't have to type it every time they post.
This has the added effect of storing the name/url/session cookies across any
site with a ZonkBoard on it.  The P3P header makes it all possible.

Here is the P3P header we use in IIS to make it happen:

P3P: CP="NOI DSP COR OPTa BUS OTC"

Google for P3P to find more info and the link to get IBM's P3P policy
editor.  It's pretty neat stuff.

-Justin Scott, Vice President
 Sceiron Interactive, Inc.
 http://www.sceiron.com

[[: Creativity is not Obsolete :]]


----- Original Message -----
From: "Costas Piliotis" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, April 02, 2003 8:23 PM
Subject: Session state / cookies within frame???


> Just noticed that a client of our wants our site within a frame from their
> own site.
>
> Normally, cf sets cookies on the client with the site information.  We
> already disallow clients who block cookies (Flame on...), but I don't
> understand why IE disallows cookies from cross site frames.
>
> I'm now somehow tasked with appending cfid and cftoken to every hyperlink,
> every javascript, every form tag, and every cflocation tag.  Argh.
>
> Anyone care to enlighten me why this is so?
>
> Thanks muchly!
>
> 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Get the mailserver that powers this list at http://www.coolfusion.com

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to