From nobody@hyperreal.com  Fri Apr 11 08:15:16 1997
Received: (from nobody@localhost)
          by hyperreal.com (8.8.4/8.8.4)
	  id IAA11642; Fri, 11 Apr 1997 08:15:16 -0700 (PDT)
Message-Id: <199704111515.IAA11642@hyperreal.com>
Date: Fri, 11 Apr 1997 08:15:16 -0700 (PDT)
From: Melvin Brown <program@teclink.net>
Reply-To: program@teclink.net
To: apbugs@hyperreal.com
Subject: mod_usertrack
X-Send-Pr-Version: 3.2

>Number:         365
>Category:       mod_cookie
>Synopsis:       mod_usertrack
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache
>State:          closed
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Fri Apr 11 08:20:02 1997
>Last-Modified:  Sat Apr 19 15:25:31 PDT 1997
>Originator:     program@teclink.net
>Organization:
>Release:        1.2b8
>Environment:
Solaris 2.4; gnu; Sparc 1000E
>Description:
I wrote a script that give cookies and test for cookies, but no cookies are given out.
>How-To-Repeat:
1. Create a cgi script that uses the post method.
2. Test for Cookie using the HTTP_COOKIE environment variable.
3. If no Cookie Send Cookie w/Set-Cookie: etc......
4. Have user return, then test for Cookie.
>Fix:
N
>Audit-Trail:
State-Changed-From-To: open-closed
State-Changed-By: dgaudet
State-Changed-When: Sat Apr 19 15:25:31 PDT 1997
State-Changed-Why:
mod_usertrack and mod_cookie are not required for your scripts
to issue cookies.  Beyond that it is known that cookies do
work when issued by standalone CGIs (i.e. not through an SSI).
You should ensure your CGI is properly generating the Set-Cookie
header ... in particular, for testing remove any "path=",
"domain=", or "expires=" headers and see if that gets through.
There are other cookie resources on the net, you might
try <http://www.illuminatus.com/cookie.fcgi>.

Thanks for using Apache!
Dean
>Unformatted: