CODEWITHSUNDEEP
c#asp.netcookies
Ryan Strauss
Ryan Strauss

Reputation: 157

Issues overwriting a cookie

Client has a site at a.url.com. Client creates a cookie with host as ".url.com" and path as "/". Client redirects to us at b.url.com. Client has a coding issue that requires us to delete the cookie (long story).

The following code is not adjusting the expiration at all in our test or production environments but is working fine locally.

if (Request.Cookies["cookie"] != null)
{
  HttpCookie myCookie = new HttpCookie("cookie");
  myCookie.Expires = DateTime.Now.AddDays(-1d);
  Response.Cookies.Add(myCookie);
}

Any ideas?

Upvotes: 2

Views: 3719

Answers (4)

Ryan Strauss
Ryan Strauss

Reputation: 157

We've figured it out. We needed to add one line of code to manually set the domain. Makes total sense now.

if (Request.Cookies["cookie"] != null)
{
  HttpCookie myCookie = new HttpCookie("cookie");
  myCookie.Domain = ".url.com";
  myCookie.Expires = DateTime.Now.AddDays(-1d);
  Response.Cookies.Add(myCookie);
}

Upvotes: 5

gary
gary

Reputation: 624

If you cannot get it working in C# you might want to consider seeing if you can manipulate the cookies in javascript.

Gary

Upvotes: 0

user179700
user179700

Reputation: 522

Here's a hack. I am just posting this in case you find out that you cannot do what you want due to some security issue preventing you handling the issue on the second site.

You could send a request to the first site to clear the cookie via redirect and have that site bounce the user back again. Like I said, this is very hackish (or I suppose marketing would call it inter-site cooperative security feature).

Hopefully, there's a better approach, but at least you have an alternative if no other ones are forthcoming.

Upvotes: 0

Matt Wrock
Matt Wrock

Reputation: 6640

is this a third party cookie? If so, the default security settings in IE will prevent cookie writing in the "internet" zone but it is allowed in your local zone.

Upvotes: 0

Related Questions