Cookie problems with non-tld domains

devbobo

Hey Guys,

I know this has been an issue for sometime, but I can across something today which makes the problem semm very obvious. While waiting for DNS progation at my end, I was checking the status using some online tools.

So I did a HTTP GET on www.introversion.com.au, and it returned this header...

HTTP/1.1 200 OK
Date: Wed, 08 Feb 2006 00:32:11 GMT
Server: Apache
X-Powered-By: smugmug/1.2.0
Set-Cookie: SMSESS=[removed]; path=/; domain=.com.au
Cache-Control: private, max-age=1, must-revalidate
Pragma:
X-Extra: 0.18368411064148
ETag: sm-07a12a5291fe06c79a52e4360f58941e-sm
Content-Length: 38545
Connection: close
Content-Type: text/html; charset=ISO-8859-1

The obvious thing to me was that the domain is being set to com.au instead of introversion.com.au. I did a quick hack to test this theory. I got Andy to test it on a password protected gallery and it worked.

Hope this helps,

David

Andy

Thanks. I'll show this to Don. Can't say when he'll look at it but he's been shown the thread. Appreciate you taking the time!