[ php-blog-Bugs-1547073 ] When using https for admin, cookies not always sent securely

Bugs item #1547073, was opened at 2006-08-26 09:19
Message generated for change (Comment added) made by garvinhicking
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=542822&aid=1547073&group_id=75065

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Administrative functions
Group: None
>Status: Pending
>Resolution: Works For Me
>Priority: 1
Submitted By: Lynoure Braakman (lynoure)
>Assigned to: Garvin Hicking (garvinhicking)
Summary: When using https for admin, cookies not always sent securely

Initial Comment:
When the admin has been set to use https, the request
for serendipity_admin.css is still sent over plain http
and the cookies get sent along. This leaks the
authentication data which is stored in a cookie.

----------------------------------------------------------------------

>Comment By: Garvin Hicking (garvinhicking)
Date: 2006-08-26 09:40

Message:
Logged In: YES 
user_id=473563

Hi!

Which s9y version are you using? It works for me, since all
URLs in s9y's admin backend are either relative (and thus
use the current host) or if absolute, use the 'https://' prefix?

Best regards,
garvin

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=542822&aid=1547073&group_id=75065

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642