Note: This is not about the tag-line cookies found in the kernel (we really need to rename those...)

Introduction

This page is an explanation of the use of browser cookies in TikiPro. Hopefully, it will help developers to understand the different types of cookies used in TikiPro and help with consistency and standardisation of their use.

Issues

Currently there are a few issues outlined below.

• Number of cookies per site
  • Previously there was a limit reached by the number of cookies produced per site. Every open and closed state of menus was stored in a cookie value, which quickly increased the numbers. Whether this exists as a problem today I am not sure - we need confirmation.
• Remember Me problems
  • The Remember Me option (Administration / Users / Login Settings) has been designed to allow a single TikiPro site to authenticate a user and then use this authenticated session for other TikiPro sites. Currently, if the user enters the incorrect cookie domain (without the wildcard prefix '.'), it causes problems. We will provide some sanity checking to ensure this simple problem does not cause grief.
  • The session name PHPSESSID is used in Bonnie, which is actually generated by PEAR:Auth. The session name TIKISESSION is now used in Clyde, which will affect the Remember Me function between TikiPro versions.

Types

There are currently two types of cookies used in TikiPro.