tracker issue : CF-3818732

select a category, or use search below
(searches all categories and all time range)
Title:

setDomainCookies="true" does not set domain cookies in websites like... http://example.com

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Paolo Groppo / Paolo Groppo (paolog)

Created: 09/04/2014

Components: General Server

Versions: 11.0

Failure Type: Non Functioning

Found In Build/Fixed In Build: CF11_Final / CF11 Update5

Priority/Frequency: Critical / All users will encounter

Locale/System: Italian / Mac 10.9 64 bit

Vote Count: 1

Listed in the version 11.0.05.293506 Issues Fixed doc 
Problem Description:
in application.cfc this.setDomainCookies="true" does not set domain cookies (.example.com) if websites has no hostname (like http://example.com)

Steps to Reproduce: 
in a website like http://www.example.com the statement this.setDomainCookies="true" in application.cfc set "domain cookies" (result domain: .example.com)
in a website like http://example.com the statement this.setDomainCookies="true" in application.cfc DO NOT set "domain cookies" (result domain: example.com)

Actual Result:
no domain cookies - domain: example.com

Expected Result:
domain cookies - domain: .example.com

Any Workarounds:
none found

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3818732

External Customer Info:
External Company:  
External Customer Name: paolog
External Customer Email:  
External Test Config: My Hardware and Environment details:

Server Details

Server Product	ColdFusion

Version	11,0,0,289822

Edition	Enterprise  

Operating System	Windows Server 2008 R2  

OS Version	6.1  

Adobe Driver Version	5.1.1 (Build 0001)

Attachments:

Comments:

Workaround found here: http://www.coldfusionmuse.com/index.cfm/2006/7/28/sessions.and.subdomains
Comment by External U.
11081 | September 05, 2014 12:45:01 PM GMT
Fix will be available in the upcoming coldfusion 11 update.
Comment by S P.
11082 | January 29, 2015 12:59:04 AM GMT
The fix for this bug is available in the pre-release build of ColdFusion 11 Update 5
Comment by CFwatson U.
11083 | February 20, 2015 09:25:22 AM GMT
Great to see this announced today as having been fixed in update 5 of CF11 (in its "bugs fixed" notes doc.) But I see people talking about this as an issue in CF10 also, and there's no mention of this in the CF10 update 16 "bugs fixed" also released today. Is it that the engineers found the problem to really only be in 11? or just that since this bug report only mentioned 11, that's all that was addressed? It would be a a shame if it is happening in 10 and it was not fixed there as well. See, for instance, http://stackoverflow.com/questions/DVAME-27748146/one-domain-2-sessions, where the OP refers specifically to CF10.
Comment by External U.
11084 | April 14, 2015 04:49:25 PM GMT
This issue was not lined up for ColdFusion 10 Update 16 release. We will evaluate if this can be taken up in the next ColdFusion 10 Update.
Comment by S P.
11085 | April 15, 2015 06:09:17 AM GMT
Verified this is fixed in CF11 Update 5 (build 11,0,05,293506). +1 to Charlie's comment. If this affects CF10, it should also be fixed for CF10. Thanks!, -Aaron
Comment by External U.
11086 | November 19, 2015 04:19:36 AM GMT
Verified this issue does affect CF10. Verified on CF10 Update 15 (build 10,0,15,292620). So this issue should be fixed for CF10. Thanks!, -Aaron
Comment by External U.
11087 | November 19, 2015 04:29:08 AM GMT
+1 - Please fix for CF10 ...........
Vote by External U.
11090 | November 19, 2015 04:31:06 AM GMT
Hey Aaron, you mention today that you have tested this as still being a problem on CF10 update 15. Can you perhaps run your test on u18 (the one released 2 days ago, as you'll know) to see if it's still an issue then? (I don't have a ready test, but it seems you do.) I'd think knowing this would help both Adobe and other readers. Thanks.
Comment by External U.
11088 | November 19, 2015 06:12:57 AM GMT
This issue will be fixed in the next ColdFusion 10 update. Thanks!
Comment by S P.
11089 | November 23, 2015 10:07:51 PM GMT