asked on 3/30/2013

PHP cookies

Simply trying to set a cookie that can be read across my website.

/login/login.php sets a cookie using this code (using PHP):
setcookie("isLoggedIn","y");

This cookie can be seen from:
/login/loggedIn.php

But not from:
/index.php or
/see.php or
/contactUs/contactUs.php etc.

It can only be seen from /login/*

I assume that this can be done... any thoughts?

PHP HTML

Last Comment

Sheldon Livingston

3/30/2013

ASKER CERTIFIED SOLUTION

msifox

3/30/2013

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

msifox

3/30/2013

P.S. just setting IsLoggedIn provides very low security, because anyone can set such a cookie in his web browser. Better set it to a random number and store that random number also in $_SESSION. Then to check the state, compare both numbers.

Sheldon Livingston

3/30/2013

ASKER

Does the time=0 make it expire after the browser closes?

msifox

3/30/2013

Yes, time 0 means the browser keeps it until the browser is closed. Another option is time()+3600 which will make it valid for one hour, time()+24*3600 for one day.

Sheldon Livingston

3/30/2013

ASKER

Thank you!