Link to home
Start Free TrialLog in
Avatar of albyh
albyh

asked on

IE compact privacy policy problem

I've got an online shop setup at one of our artists websites www.danreed.com/shop.php via an iframe.

The shop workes fine in firefox, chrome etc but IE will not accept the cookies as it's a "third party site".  I've downloaded the IBM p3p policy editor and created a policy for online stores.

I've added the line

header("P3P: policyref=\"http://www.townsend-records.co.uk/w3c/p3p.xml\", CP=\"NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA\"");

to my code and this made the header look like the following

HTTP/1.1 200 OK
Date: Thu, 25 Mar 2010 11:20:22 GMT
Server: Apache
Set-Cookie: PHPSESSID=m2k1jtf5hbm5ntj81bcoi5t1m2; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="http://www.townsend-records.co.uk/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA"
Content-Length: 2795
Connection: close
Content-Type: text/html; charset=ISO-8859-15

Unfortunately this hasn't worked and IE still says it could not find a privacy policy for the page.

Any help would be greatly appreciated.
Avatar of andrewbleakley
andrewbleakley
Flag of Australia image

Save your p3p.xml file as /w3c/policy.xml

change line 8 & 9 to include a name="policy1" attribute

<POLICY name="policy1"
     xml:lang="en">


Create a new /w3c/p3p.xml file with the following content

<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="/w3c/policy.xml#policy1">
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name="*" value="*" domain="*" path="*"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>

Avatar of albyh
albyh

ASKER

Hi Andrew, thanks for your comments

I've now amended those files and IE now identifies there is a privacy policy present but is still blocking the cookies for the page.

it might be IE caching your page information. I have just checked the site in IE and the privacy report is telling me it is accepting your cookies
Avatar of albyh

ASKER

I've just checked it the site and it works on 2 of 3 PC's here (mine being the one it doesnt work on).

I've tried clearing the cache to no avail and have now logged onto my PC at home to try it there and it is blocking the cookies there as well.  It seems its only blocking the cookies on certain PC's :-S
ASKER CERTIFIED SOLUTION
Avatar of andrewbleakley
andrewbleakley
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of albyh

ASKER

I still have 2 PC's that are still blocking the cookies but it seems you solved the problem I posted.

Thanks