Re: Cookies, Called Routine

[Scott Klement <sk@xxxxxxxxxxxxxxxx>]

Peter,

Yes, I know about this "problem."  You see...  The RFC that sets the 
standards for cookies says very clearly that cookie names are not 
case-sensitive.  And when I wrote HTTPAPI, I believed that people would 
follow those standards.

However, I have discovered (you are the 3rd person to report it) that 
there are quite a few applications out there that treat cookies as 
case-sensitive despite that the standards say that they are not.

Anyway, that problem should already be fixed in the current beta.  Try 
using the built-in cookie support (instead of the ADDL_HEADER kludge) in 
the current beta and see if it solves the issue.



Peter Connell wrote:
> Scott,
> Damned if I could resolve MY cookie problem until now.
> 
> My destination url returns a session cookie which it associates with a
> credentials sent from a login request.
> Trouble is, the login would never actually occur and always returned the
> please log in page again.
>  
> After a day of trying every which way I noticed that allowing the
> HTTPAPI default cookie handling to occur causes the name of the cookie
> attribute in question to be return as lowercase.
> Since this is apparently of significance when the destination processes
> the login request then the request is unsuccessful.
> 
> By setting http_use_cookies(*off), retrieving the header entry
> explicitly http_header('set-cookie') and then returning the exact same
> via an HTTP_POINT_ADDL_HEADER exit point, the destination responds with
> a successful login.
> 
> Cheers, Peter
> 
>   
> 
> -----Original Message-----
> From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
> [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Scott
> Klement
> Sent: Friday, 24 April 2009 6:54 a.m.
> To: HTTPAPI and FTPAPI Projects
> Subject: Re: Cookies, Called Routine
> 
> hi Jim,
> 
> Activation group MIGHT matter.  It depends on:
> 
> a) Whether the cookies are session ("temporary") cookies, or whether 
> they are permanent cookies.
> 
> b) Whether you specified a file to save the cookies to.
> 
> HTTPAPI will keep session cookies in memory until the activation group 
> ends.  It will, however, save permanent cookies to your cookie file if 
> one is assigned.  If no cookie file is assigned, HTTPAPI treats all 
> cookies as session cookies.
> 
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------