Session Tracking within Frames

in I.E. cookie information is lost

[the_nerd]

pls. don't laugh at me - but this has been bugging me for a year, so finally I dare asking ;)

I offer a shop-system that runs on my server but dealers can configure the layout so it looks like their own shop. Some dealers put the shop into a frame so it becomes part of their website (from a customer's point of view).

Problem is, that session tracking by cookies doesn't work as soon as the page runs in a frame (which I can't control). So I add session id and other stuff to the URL. Works fine but I hate the parameters.

Does anbody know a way to get arond this problem?

Thanks, nerd.

[the_nerd]

any idea?

[Easy_Coder]

I think that your gonna be stuck with that solution... Your dealers are on different servers right? So Server B won't be getting at those cookies written from server A.

[the_nerd]

No, they're on the same server.

It just looks like Internet Explorer somehow prevents writing the cookie - or doesn't read it back correctly on the next page. But only when the shop is run within a frame.

[Easy_Coder]

Can you post your Cookie Write and Cookie Read Code.

If your on the same box can I assume that your within the same domain when your attempting to read the cookie?

[dotme]

Just a thought - IE 6 won't take 3rd party cookies by default unless you write P3P policy and include the correct headers on the page where you set the cookie. (I don't think the headers are needed to read it, just to set it)

Don't get me started on P3P - It's another hoop to jump through and at the end of the day, it all hinges on the honesty of the site developer anyway.

I guess if you test your existing cookie code with IE4, or Netscape 4.72, and it works... Then it's probably just a matter of developing P3P code and policies. I developed a site that is often IFRAME'd by others, and I can set cookies no problem once the P3P code was in place.

Good luck!

[Spooky]

Check out microsoft support kbid=323752
The resolution does relate to p3p

[the_nerd]

Thanks guys, looks like it's really this P3P-stuff.