iframe, cookies and internet explorer <- bad combination

[here2learn]

Ok, I was testing my osC within an iframe, first on firefox by opening two windows: one with osC in the parent window, and other with osC within an iframe.

 

I added an item to the cart in the parent window, and then checked my iframe osC's cart. The item was there, good.

 

Then I did the same, but on Internet Explorer 6, and guess what? The item was added to the cart in the parent window, but when checking my cart in the iframe it was empty.

 

I read this is related to P3P private policy. Is it true? If so, where especifically should I add the P3P header? Would adding it to footer.php and header.php suffice?

 

Other question, about the P3P header, is that there are many out there. For instance, these two are very common:

 

<?php

header('P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"');

 

<?php

header('IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"');

 

The first return 126.000 results on Google, and the second 127.000.

 

There is this short one too:

 

<?php

header('P3P: CP="CAO PSA OUR"');

 

Which returns 290.000 results. Unlike the huge majority of people searching for it because of a cross-domain iframe, my main site and osC are in the same-domain.

[here2learn]

Ok, something I just discovered: if I add an item to the cart in the parent window, and then access the cart through the iframe IN THIS SAME IE6 WINDOW THAT I USED TO ADD THE ITEM then it will work and show up normally in the iframe.

 

If I open a new IE6 window, it will ask me for the password (I am using my host CP's Password Protection till all tweaks/protection are added) so I believe this messes up with each window opened and the second window I opened can't read the cookies that was set in the first.

 

I don't need to use P3P header I guess, since it isn't a cross-domain issue (both my site and osC are in the same domain) and like I mentioned, my iframe page was able to read the cookies. The issue here is that before I was testing with two windows opened. One, the osC itself, and the other, the osC within the iframe. Now after I tested both in the same window by first adding an item to the cart and then checking it through the iframe in this same window, the item showed up correctly.

 

Hope I am correct about the Password Protection thingy messing up with acessing cookies in different opened IE6 windows.