cookie domains

[adminjim]

Can someone please explain to me the difference between the

 

http:// cookie domain

 

adn the

 

Https:// cookie domain

 

Thanks

 

adn also what I need to put in for the cookie path's

 

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://www.sitename.com/catalog/');

define('HTTPS_COOKIE_DOMAIN', 'https://www.sitename.com/catalog/');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

[rdavido]

silly, https is for SSL-enabled sites. If you don't have an SSL certificate, then don't enter any value for it.

 

http, refers to the standard, non-ssl (secure sockets layer) web browsing

 

this info goes into the cookie when a user visits the site, depending on security settings, an end-user's browser may bitch if a cookie from http://www.modopia.com doesn't claim it's from http://www.modopia.com - so just enter the URL of your domain. Same goes for SSL-enabled, https browsing

 

the cookies path is typically just "/" - meaning the default web url. if the domain is www.modopia.com and the cookie path is /, it simply refers to the main website. you can enter a path, but make sure it exists on the server and that you have a good reason for doing that - I can't think of one.

[rdavido]

looking at your post, you have ENABLE_SSL set to true, do you have an SSL certificate? if so, then just enter the https url that folks will be directed to when going to your secure site.

 

if you don't have ssl, then set ENABLE_SSL to false.