Workaround IE6 3rd party cookie blocking?

[nemonoman]

IE is blocking my '3rd party' cookies.

I have a php program running on myphp.com

www.xxx.com and www.yyy.com both use a frame that calls the domain like this:

frame src='http://myphp.com/index.php?portal=xxx',

or

frame src='http://myphp.com/index.php?portal=yyy'

Now index.php gets a session id and writes a cookie "sessionid=12345". which tracks whether the user entered from xxx or yyy.

This works fine unless IE has been set to its default privacy setting of medium., which blocks this cookie as a 3rd party cookie. (It also blocks a gif.file I use in a menu.)

I have spent several fruitless hours screwing around with P3P.org, creating privacy policies, etc. etc.

Despite creating a w3c directory and a p3p.xml, etc. no luck. Have tried sending a compact header w. the cookie, but I think I'm doing this wrong.

The cookie is entirely benign -- I track no user info -- but without it I can't easily keep track of the user's portal. Different content is delivered based on entry portal.

I need someone to tell me EXPLICITLY please what I need to do to squeeze past IE's cookie blocking.

THANKS.

Nemo

[dalecosp]

$longshot="If you control all these servers, can you proxy the information through server xxx or yyy and escape the problem?";

echo "$longshot";

dalecosp

[nemonoman]

If I controlled the servers, I could work around the problem.

Don't. Can't.

If I controlled MSIE...but most will be naive userswho probably are using default settings and won't understand why my code breaks, and won't be bothered with trying to figure out how to manage their privacy settings.

[nemonoman]

anyone have any experience with these? How to include?

[nemonoman]

solved my own problem.

You need to modify .htaccess.

add this line:

append header P3P "CP=\"NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT\""

or something similar. I think any compact policy will do (that's the CP string above).

Unless your http server returns a compact policy as part of its http headers, as above, IE will block your '3rd party' cookies under 'medium' privacy settings.