Cookie And 3rd Party Script

[AthlonInside]

I have a cookiereader.php script sitting at SiteA.com

I load cookiereader.php from through the <IMG> tag in a page in SiteB.com

The PHP script could not read any of the cookies of SiteA.com.

Please share with me the tactics on how we can read the cookie of SiteA.com? I need this becuase I am implementing some tracking server. I believe CJ and other affiliate networks are doing this as well. They set a cookie in their server, and the merchant load a pixel to read the cookie. (But I fail to read the cookie, please help me)

[AthlonInside]

p/s when cookieread.php is load directly from the browser at siteA.com/cookiereader.php it can read the cookie. But when it is put in a page in SiteB.com in <img src=siteA.com/cookiereader.php> it can't read the cookie. How do I go around this?

I am reading the cookie via $_COOKIE['mycookie'].

[AthlonInside]

This has to do with IE 6 new privacy default setting .

To overcome this problem, the cookie MUST be set along with a compact policy. Then it can be read as a 3rd party cookie. Else it will be "leeched" and cannot be read as what happens to me.

So, I simply add a line that look something like

header('P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"');

immediately after I set the cookie and everything is solved. The cookie set with the compact policy can now be read as 3rd party.

For more information, please read this:

[support.microsoft.com...]

Medium (Default) Privacy Setting
The Medium privacy setting blocks third-party cookies that do not have a compact policy (a condensed computer-readable privacy statement) or third-party cookies that have a compact policy that specifies that personally identifiable information is used without your implicit consent. First-party cookies that have a compact policy that specifies that personally identifiable information is used without implicit consent are "downgraded" (deleted when you close Internet Explorer). First-party cookies that do not have a compact policy are "leashed" (restricted so that they can only be read in the first-party context). Cookies that had been stored on your computer before you installed Internet Explorer 6 are also leashed.

NOTE: By default, the Per Site Privacy Actions dialog box is not populated, so the Medium setting is not overridden for any individual Web sites. If you click Edit on the Privacy tab of Internet Options and you add managed Web sites to the list with either an Always Block or Always Allow setting, these preferences can override the Medium setting on the slider.