albyh
asked on
IE compact privacy policy problem
I've got an online shop setup at one of our artists websites www.danreed.com/shop.php via an iframe.
The shop workes fine in firefox, chrome etc but IE will not accept the cookies as it's a "third party site". I've downloaded the IBM p3p policy editor and created a policy for online stores.
I've added the line
header("P3P: policyref=\"http://www.townsend-records.co.uk/w3c/p3p.xml\", CP=\"NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA\"");
to my code and this made the header look like the following
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2010 11:20:22 GMT
Server: Apache
Set-Cookie: PHPSESSID=m2k1jtf5hbm5ntj8 1bcoi5t1m2 ; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="http://www.townsend-records.co.uk/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA"
Content-Length: 2795
Connection: close
Content-Type: text/html; charset=ISO-8859-15
Unfortunately this hasn't worked and IE still says it could not find a privacy policy for the page.
Any help would be greatly appreciated.
The shop workes fine in firefox, chrome etc but IE will not accept the cookies as it's a "third party site". I've downloaded the IBM p3p policy editor and created a policy for online stores.
I've added the line
header("P3P: policyref=\"http://www.townsend-records.co.uk/w3c/p3p.xml\", CP=\"NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA\"");
to my code and this made the header look like the following
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2010 11:20:22 GMT
Server: Apache
Set-Cookie: PHPSESSID=m2k1jtf5hbm5ntj8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="http://www.townsend-records.co.uk/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA"
Content-Length: 2795
Connection: close
Content-Type: text/html; charset=ISO-8859-15
Unfortunately this hasn't worked and IE still says it could not find a privacy policy for the page.
Any help would be greatly appreciated.
Save your p3p.xml file as /w3c/policy.xml
change line 8 & 9 to include a name="policy1" attribute
<POLICY name="policy1"
xml:lang="en">
Create a new /w3c/p3p.xml file with the following content
<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="/w3c/policy.xml#pol icy1">
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name="*" value="*" domain="*" path="*"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>
change line 8 & 9 to include a name="policy1" attribute
<POLICY name="policy1"
xml:lang="en">
Create a new /w3c/p3p.xml file with the following content
<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="/w3c/policy.xml#pol
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name="*" value="*" domain="*" path="*"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>
ASKER
Hi Andrew, thanks for your comments
I've now amended those files and IE now identifies there is a privacy policy present but is still blocking the cookies for the page.
I've now amended those files and IE now identifies there is a privacy policy present but is still blocking the cookies for the page.
it might be IE caching your page information. I have just checked the site in IE and the privacy report is telling me it is accepting your cookies
ASKER
I've just checked it the site and it works on 2 of 3 PC's here (mine being the one it doesnt work on).
I've tried clearing the cache to no avail and have now logged onto my PC at home to try it there and it is blocking the cookies there as well. It seems its only blocking the cookies on certain PC's :-S
I've tried clearing the cache to no avail and have now logged onto my PC at home to try it there and it is blocking the cookies there as well. It seems its only blocking the cookies on certain PC's :-S
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I still have 2 PC's that are still blocking the cookies but it seems you solved the problem I posted.
Thanks
Thanks
see http://validator.w3.org/p3p/20020128/p3p.pl?uri=http%3A%2F%2Fwww.townsend-records.co.uk