Setting cookies on other domains

Cheers

Have tried everything now but still cant get this to work at all...

on domain2.com setcookie.php reads...

<?
setcookie ("D1Cookie", "D1 Value" ,time()+3600, "/", ".domain1.com");
?>

on.... domain1.com....readcookie.php reads....

<?
echo $_COOKIE['D1Cookie'];
?>

returns nothing?

Cookie is simply not being set?

Can anyone advise please.

swr

You can't read or set cookies for other domains. The browser doesn't allow it, due to security restrictions.

Try passing the variables in the URL or hidden form variable instead.

Cheers

I suspected it was a browser thing...

I need to set a cookie on domain1 (lasts upto 90 days) which I then need to retrieve and handle on domain2. (affiliate programme tracking)

Is there a way that I can create a page on domain1 that checks for a cookie and returns this value back to domain2?

If so, can you advise please.

Thanks

coditoergosum

You can pass the var to the other domain via a GET var... as already mentioned by swr.

You cannot read cookies across domains though... that would be a major security vulnerability if you could. There used to actually be a bug in IE that would allow this... which was patched by a security update.

Think about it, if you could read cookies across other domains, a malicious webmaster could get everything on your machine that is stored in a cookie... which could contain sensitive information (it's good practice never to save this type of info in a cookie, but there are stupid web developers out there that do it).

Weedpacket

Not to mention the privacy concerns that many people had over companies that used cookies to track users' browsing habits. It's why so many people still turn off cookies.

James_McMurray

It isn't possible to read a cookie from another domain, but is it possible to set a cookie so that it is read by the other domain?

In other words, instead of site1 trying to read a cookie set by site 2, site 2 creates a cookie whose domain is site 1. Then site 2 wouldn't be able to read the cookie, but site 1 could.

bradgrafelman

Nop, once again, security restriction. You aren't allowed to set cookies "on behalf" of another domain.

The solution mentioned above seems to be the best; either POST the data through a form, or GET the data via encoding it/passing it through the URL.

EDIT: Also, POST'ing across domains in IE will/can result in a warning, and may even be disabled.

James_McMurray

Unfortunately that won't work for me, as I don't own the second domain. I was trying to let people post as me on a BBS by using a form on my website.

Oh well, looks like the idea has to be scrapped. 🙁