Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:12201
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Message-ID: <5.1.0.14.2.20040817161212.044edd50@127.0.0.1>
Date: Tue, 17 Aug 2004 16:17:59 -0700
To: internals@lists.php.net
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Subject: setcookie() and Max-Age
From: andi@zend.com (Andi Gutmans)

Hey,

There's a very interesting user contributed note for the setcookie() 
function (Follows in the end).
I think it makes sense to support Max-Age because it fixes clock skew 
problems between the client and server.
Not sure if an how this could be added to setcookie() because of the 
already rich amount of parameters it accepts. Would it make sense to have 
something like setcookie_max_age() or something similar?

Andi


add a note User Contributed Notes
setcookie
mr-yellow at mr-yellow dot com
15-Aug-2004 10:14
Sorry Secure not Secure=1....

Instead of setcookie it would be much safer to use the new
better specs and send the following.

A 1 hour cookie is as follows:

header('Set-Cookie: TestCookie=something+from+somewhere; Max-Age=3600; 
Domain=.www.domain.com; Path=/; secure;');

To Delete a cookie set -1:

header('Set-Cookie: TestCookie=something+from+somewhere; Max-Age=-1; 
Domain=.www.domain.com; Path=/; secure;');

-Ben