Connecting Tech Pros Worldwide Forums | Help | Site Map

Cookies - Is this possible?

Guest
 
Posts: n/a
#1: Jul 19 '05
Is it possible for a user to enable permanent cookies but disable session
cookies.....this seems like a contradition yet this is what I appear to be
reading in online articles?



Guest
 
Posts: n/a
#2: Jul 19 '05

re: Cookies - Is this possible?


I must be stupid, but I am picking up contradictions on how cookies are used
in sites. This dude says of Amazon:

Statement: "Amazon.com passes this test when it comes to the site being 100%
usable if one were to manually disable and delete cookies"
http://www.stickyminds.com/sitewide....ObjectType=ART
He then says: . I was able to use all major aspects of the site-searching,
shopping cart, checkout functions-even though cookies were completely
disabled.

His conclusion:

It appears that state maintenance was being taken care of server-side, based
on the session ID at the end of the home page URL. For example, I chose the
Yamaha CD-ROM kit on the amazon home page and added it to my shopping cart.
The shopping cart page URL was
http://www.amazon.com/./one-click-th...357560-1728507. Changing
the rightmost digit from 7 to 8, and posting this edited URL, lost my
shopping cart and brought up the following error page, lending further
support to the probability of server-side state maintenance with a session
ID in the URL.

My Question:

How can 'state' be preserved on the server via a session ID if COOKIES ARE
DISABLED and DELETEd....

I thought if the user disabled cookies that blew if for Session Variables...

Could someone please tell me what I am missing here?

Thanks

Jason

<jason@catamaranco.com> wrote in message
news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...[color=blue]
> Is it possible for a user to enable permanent cookies but disable session
> cookies.....this seems like a contradition yet this is what I appear to be
> reading in online articles?
>
>[/color]


Bob Lehmann
Guest
 
Posts: n/a
#3: Jul 19 '05

re: Cookies - Is this possible?


The id (107-0357560-1728507) is appended to the url, and then checked,
usually, against a value in a DB to keep track of the user.

Bob Lehmann

<jason@catamaranco.com> wrote in message
news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...[color=blue]
> I must be stupid, but I am picking up contradictions on how cookies are[/color]
used[color=blue]
> in sites. This dude says of Amazon:
>
> Statement: "Amazon.com passes this test when it comes to the site being[/color]
100%[color=blue]
> usable if one were to manually disable and delete cookies"
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue]
> He then says: . I was able to use all major aspects of the site-searching,
> shopping cart, checkout functions-even though cookies were completely
> disabled.
>
> His conclusion:
>
> It appears that state maintenance was being taken care of server-side,[/color]
based[color=blue]
> on the session ID at the end of the home page URL. For example, I chose[/color]
the[color=blue]
> Yamaha CD-ROM kit on the amazon home page and added it to my shopping[/color]
cart.[color=blue]
> The shopping cart page URL was
> http://www.amazon.com/./one-click-th...357560-1728507. Changing
> the rightmost digit from 7 to 8, and posting this edited URL, lost my
> shopping cart and brought up the following error page, lending further
> support to the probability of server-side state maintenance with a session
> ID in the URL.
>
> My Question:
>
> How can 'state' be preserved on the server via a session ID if COOKIES ARE
> DISABLED and DELETEd....
>
> I thought if the user disabled cookies that blew if for Session[/color]
Variables...[color=blue]
>
> Could someone please tell me what I am missing here?
>
> Thanks
>
> Jason
>
> <jason@catamaranco.com> wrote in message
> news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...[color=green]
> > Is it possible for a user to enable permanent cookies but disable[/color][/color]
session[color=blue][color=green]
> > cookies.....this seems like a contradition yet this is what I appear to[/color][/color]
be[color=blue][color=green]
> > reading in online articles?
> >
> >[/color]
>
>[/color]


Guest
 
Posts: n/a
#4: Jul 19 '05

re: Cookies - Is this possible?


But is that ID not dependent on being retrieved iniitally from the user
machines cookie?

If cookies are disabled this ID would not be retrievable for later use on
the server?

"Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...[color=blue]
> The id (107-0357560-1728507) is appended to the url, and then checked,
> usually, against a value in a DB to keep track of the user.
>
> Bob Lehmann
>
> <jason@catamaranco.com> wrote in message
> news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...[color=green]
> > I must be stupid, but I am picking up contradictions on how cookies are[/color]
> used[color=green]
> > in sites. This dude says of Amazon:
> >
> > Statement: "Amazon.com passes this test when it comes to the site being[/color]
> 100%[color=green]
> > usable if one were to manually disable and delete cookies"
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green]
> > He then says: . I was able to use all major aspects of the[/color][/color]
site-searching,[color=blue][color=green]
> > shopping cart, checkout functions-even though cookies were completely
> > disabled.
> >
> > His conclusion:
> >
> > It appears that state maintenance was being taken care of server-side,[/color]
> based[color=green]
> > on the session ID at the end of the home page URL. For example, I chose[/color]
> the[color=green]
> > Yamaha CD-ROM kit on the amazon home page and added it to my shopping[/color]
> cart.[color=green]
> > The shopping cart page URL was
> > http://www.amazon.com/./one-click-th...357560-1728507.[/color][/color]
Changing[color=blue][color=green]
> > the rightmost digit from 7 to 8, and posting this edited URL, lost my
> > shopping cart and brought up the following error page, lending further
> > support to the probability of server-side state maintenance with a[/color][/color]
session[color=blue][color=green]
> > ID in the URL.
> >
> > My Question:
> >
> > How can 'state' be preserved on the server via a session ID if COOKIES[/color][/color]
ARE[color=blue][color=green]
> > DISABLED and DELETEd....
> >
> > I thought if the user disabled cookies that blew if for Session[/color]
> Variables...[color=green]
> >
> > Could someone please tell me what I am missing here?
> >
> > Thanks
> >
> > Jason
> >
> > <jason@catamaranco.com> wrote in message
> > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...[color=darkred]
> > > Is it possible for a user to enable permanent cookies but disable[/color][/color]
> session[color=green][color=darkred]
> > > cookies.....this seems like a contradition yet this is what I appear[/color][/color][/color]
to[color=blue]
> be[color=green][color=darkred]
> > > reading in online articles?
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


Bob Lehmann
Guest
 
Posts: n/a
#5: Jul 19 '05

re: Cookies - Is this possible?


I'm not sure.

In this case, though, it looks like a GUID is being generated by the DB.

Bob Lehmann

<jason@catamaranco.com> wrote in message
news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...[color=blue]
> But is that ID not dependent on being retrieved iniitally from the user
> machines cookie?
>
> If cookies are disabled this ID would not be retrievable for later use on
> the server?
>
> "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...[color=green]
> > The id (107-0357560-1728507) is appended to the url, and then checked,
> > usually, against a value in a DB to keep track of the user.
> >
> > Bob Lehmann
> >
> > <jason@catamaranco.com> wrote in message
> > news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...[color=darkred]
> > > I must be stupid, but I am picking up contradictions on how cookies[/color][/color][/color]
are[color=blue][color=green]
> > used[color=darkred]
> > > in sites. This dude says of Amazon:
> > >
> > > Statement: "Amazon.com passes this test when it comes to the site[/color][/color][/color]
being[color=blue][color=green]
> > 100%[color=darkred]
> > > usable if one were to manually disable and delete cookies"
> > >[/color]
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green][color=darkred]
> > > He then says: . I was able to use all major aspects of the[/color][/color]
> site-searching,[color=green][color=darkred]
> > > shopping cart, checkout functions-even though cookies were completely
> > > disabled.
> > >
> > > His conclusion:
> > >
> > > It appears that state maintenance was being taken care of server-side,[/color]
> > based[color=darkred]
> > > on the session ID at the end of the home page URL. For example, I[/color][/color][/color]
chose[color=blue][color=green]
> > the[color=darkred]
> > > Yamaha CD-ROM kit on the amazon home page and added it to my shopping[/color]
> > cart.[color=darkred]
> > > The shopping cart page URL was
> > > http://www.amazon.com/./one-click-th...357560-1728507.[/color][/color]
> Changing[color=green][color=darkred]
> > > the rightmost digit from 7 to 8, and posting this edited URL, lost my
> > > shopping cart and brought up the following error page, lending further
> > > support to the probability of server-side state maintenance with a[/color][/color]
> session[color=green][color=darkred]
> > > ID in the URL.
> > >
> > > My Question:
> > >
> > > How can 'state' be preserved on the server via a session ID if COOKIES[/color][/color]
> ARE[color=green][color=darkred]
> > > DISABLED and DELETEd....
> > >
> > > I thought if the user disabled cookies that blew if for Session[/color]
> > Variables...[color=darkred]
> > >
> > > Could someone please tell me what I am missing here?
> > >
> > > Thanks
> > >
> > > Jason
> > >
> > > <jason@catamaranco.com> wrote in message
> > > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...
> > > > Is it possible for a user to enable permanent cookies but disable[/color]
> > session[color=darkred]
> > > > cookies.....this seems like a contradition yet this is what I appear[/color][/color]
> to[color=green]
> > be[color=darkred]
> > > > reading in online articles?
> > > >
> > > >
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


Guest
 
Posts: n/a
#6: Jul 19 '05

re: Cookies - Is this possible?


You see, this cannot be possible, as his example is based on returning to
the home page of Amazon after he has disabled cookies...thus it is not
possible for the browser to know who he is unless it was pulling:

1. Cookie (but disabled, so impossible)
2. IP (But they would never do this method due to dynamic dhcp and aol user
implications of same ip)

Thus, something is screwed up with his explanation.

- Jason


"Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
news:%23Ceuq7LfEHA.396@TK2MSFTNGP12.phx.gbl...[color=blue]
> I'm not sure.
>
> In this case, though, it looks like a GUID is being generated by the DB.
>
> Bob Lehmann
>
> <jason@catamaranco.com> wrote in message
> news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...[color=green]
> > But is that ID not dependent on being retrieved iniitally from the user
> > machines cookie?
> >
> > If cookies are disabled this ID would not be retrievable for later use[/color][/color]
on[color=blue][color=green]
> > the server?
> >
> > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...[color=darkred]
> > > The id (107-0357560-1728507) is appended to the url, and then checked,
> > > usually, against a value in a DB to keep track of the user.
> > >
> > > Bob Lehmann
> > >
> > > <jason@catamaranco.com> wrote in message
> > > news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...
> > > > I must be stupid, but I am picking up contradictions on how cookies[/color][/color]
> are[color=green][color=darkred]
> > > used
> > > > in sites. This dude says of Amazon:
> > > >
> > > > Statement: "Amazon.com passes this test when it comes to the site[/color][/color]
> being[color=green][color=darkred]
> > > 100%
> > > > usable if one were to manually disable and delete cookies"
> > > >
> > >[/color]
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green][color=darkred]
> > > > He then says: . I was able to use all major aspects of the[/color]
> > site-searching,[color=darkred]
> > > > shopping cart, checkout functions-even though cookies were[/color][/color][/color]
completely[color=blue][color=green][color=darkred]
> > > > disabled.
> > > >
> > > > His conclusion:
> > > >
> > > > It appears that state maintenance was being taken care of[/color][/color][/color]
server-side,[color=blue][color=green][color=darkred]
> > > based
> > > > on the session ID at the end of the home page URL. For example, I[/color][/color]
> chose[color=green][color=darkred]
> > > the
> > > > Yamaha CD-ROM kit on the amazon home page and added it to my[/color][/color][/color]
shopping[color=blue][color=green][color=darkred]
> > > cart.
> > > > The shopping cart page URL was
> > > > http://www.amazon.com/./one-click-th...357560-1728507.[/color]
> > Changing[color=darkred]
> > > > the rightmost digit from 7 to 8, and posting this edited URL, lost[/color][/color][/color]
my[color=blue][color=green][color=darkred]
> > > > shopping cart and brought up the following error page, lending[/color][/color][/color]
further[color=blue][color=green][color=darkred]
> > > > support to the probability of server-side state maintenance with a[/color]
> > session[color=darkred]
> > > > ID in the URL.
> > > >
> > > > My Question:
> > > >
> > > > How can 'state' be preserved on the server via a session ID if[/color][/color][/color]
COOKIES[color=blue][color=green]
> > ARE[color=darkred]
> > > > DISABLED and DELETEd....
> > > >
> > > > I thought if the user disabled cookies that blew if for Session
> > > Variables...
> > > >
> > > > Could someone please tell me what I am missing here?
> > > >
> > > > Thanks
> > > >
> > > > Jason
> > > >
> > > > <jason@catamaranco.com> wrote in message
> > > > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...
> > > > > Is it possible for a user to enable permanent cookies but disable
> > > session
> > > > > cookies.....this seems like a contradition yet this is what I[/color][/color][/color]
appear[color=blue][color=green]
> > to[color=darkred]
> > > be
> > > > > reading in online articles?
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


Bob Lehmann
Guest
 
Posts: n/a
#7: Jul 19 '05

re: Cookies - Is this possible?


It's not impossible. And, I don't think you understand what is going on
there.

This is what happens when a site chooses not to rely on cookies or sessions
for tracking users....

1. User enters site
2. A unique ID is assigned to the user, usually from a DB generated unique
ID
3. The unique id is stored in a DB
4. The unique ID is appended to *all* URLs to track the user, and passed
from page to page in the URL
5. If the unique ID is needed on a page, it is looked up in the DB and used
as a key in the DB for whatever transaction took place

You are making this cookies / no cookies problem way more difficult than it
needs to be.

You need to come up with some Use / Business Cases to determine if the no
cookie problem is really a problem to begin with. If no cookies will
severely impact your application, then code a solution that doesn't rely on
cookies. Don't add complexity developing 2 solutions to the problem

If there is bearable risk in not supporting the no-cookie folks, then direct
them to page that informs that accepting cookies are required, and let them
decide.

I'm not trying to be critical - You are obviously working very hard to do
whatever it is you are doing. But, you are lacking some fundamentals that
are causing you to go down paths trying to finding solutions to problems
that don't exist.

I suggest reading some basic literature on server-side programming and ASP.

Also, read this...
http://www.aspfaq.com/show.asp?id=2054

Bob Lehmann


<jason@catamaranco.com> wrote in message
news:uuiIS%23LfEHA.3916@TK2MSFTNGP11.phx.gbl...[color=blue]
> You see, this cannot be possible, as his example is based on returning to
> the home page of Amazon after he has disabled cookies...thus it is not
> possible for the browser to know who he is unless it was pulling:
>
> 1. Cookie (but disabled, so impossible)
> 2. IP (But they would never do this method due to dynamic dhcp and aol[/color]
user[color=blue]
> implications of same ip)
>
> Thus, something is screwed up with his explanation.
>
> - Jason
>
>
> "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> news:%23Ceuq7LfEHA.396@TK2MSFTNGP12.phx.gbl...[color=green]
> > I'm not sure.
> >
> > In this case, though, it looks like a GUID is being generated by the DB.
> >
> > Bob Lehmann
> >
> > <jason@catamaranco.com> wrote in message
> > news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...[color=darkred]
> > > But is that ID not dependent on being retrieved iniitally from the[/color][/color][/color]
user[color=blue][color=green][color=darkred]
> > > machines cookie?
> > >
> > > If cookies are disabled this ID would not be retrievable for later use[/color][/color]
> on[color=green][color=darkred]
> > > the server?
> > >
> > > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > > news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...
> > > > The id (107-0357560-1728507) is appended to the url, and then[/color][/color][/color]
checked,[color=blue][color=green][color=darkred]
> > > > usually, against a value in a DB to keep track of the user.
> > > >
> > > > Bob Lehmann
> > > >
> > > > <jason@catamaranco.com> wrote in message
> > > > news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...
> > > > > I must be stupid, but I am picking up contradictions on how[/color][/color][/color]
cookies[color=blue][color=green]
> > are[color=darkred]
> > > > used
> > > > > in sites. This dude says of Amazon:
> > > > >
> > > > > Statement: "Amazon.com passes this test when it comes to the site[/color]
> > being[color=darkred]
> > > > 100%
> > > > > usable if one were to manually disable and delete cookies"
> > > > >
> > > >
> > >[/color]
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green][color=darkred]
> > > > > He then says: . I was able to use all major aspects of the
> > > site-searching,
> > > > > shopping cart, checkout functions-even though cookies were[/color][/color]
> completely[color=green][color=darkred]
> > > > > disabled.
> > > > >
> > > > > His conclusion:
> > > > >
> > > > > It appears that state maintenance was being taken care of[/color][/color]
> server-side,[color=green][color=darkred]
> > > > based
> > > > > on the session ID at the end of the home page URL. For example, I[/color]
> > chose[color=darkred]
> > > > the
> > > > > Yamaha CD-ROM kit on the amazon home page and added it to my[/color][/color]
> shopping[color=green][color=darkred]
> > > > cart.
> > > > > The shopping cart page URL was
> > > > > http://www.amazon.com/./one-click-th...357560-1728507.
> > > Changing
> > > > > the rightmost digit from 7 to 8, and posting this edited URL, lost[/color][/color]
> my[color=green][color=darkred]
> > > > > shopping cart and brought up the following error page, lending[/color][/color]
> further[color=green][color=darkred]
> > > > > support to the probability of server-side state maintenance with a
> > > session
> > > > > ID in the URL.
> > > > >
> > > > > My Question:
> > > > >
> > > > > How can 'state' be preserved on the server via a session ID if[/color][/color]
> COOKIES[color=green][color=darkred]
> > > ARE
> > > > > DISABLED and DELETEd....
> > > > >
> > > > > I thought if the user disabled cookies that blew if for Session
> > > > Variables...
> > > > >
> > > > > Could someone please tell me what I am missing here?
> > > > >
> > > > > Thanks
> > > > >
> > > > > Jason
> > > > >
> > > > > <jason@catamaranco.com> wrote in message
> > > > > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...
> > > > > > Is it possible for a user to enable permanent cookies but[/color][/color][/color]
disable[color=blue][color=green][color=darkred]
> > > > session
> > > > > > cookies.....this seems like a contradition yet this is what I[/color][/color]
> appear[color=green][color=darkred]
> > > to
> > > > be
> > > > > > reading in online articles?
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


joker
Guest
 
Posts: n/a
#8: Jul 19 '05

re: Cookies - Is this possible?


Also don't forget about us router users who share one IP address. We
may have 2+ people browsing the same site at the same time.

jason@catamaranco.com wrote:
[color=blue]
> You see, this cannot be possible, as his example is based on returning to
> the home page of Amazon after he has disabled cookies...thus it is not
> possible for the browser to know who he is unless it was pulling:
>
> 1. Cookie (but disabled, so impossible)
> 2. IP (But they would never do this method due to dynamic dhcp and aol user
> implications of same ip)
>
> Thus, something is screwed up with his explanation.
>
> - Jason
>
>
> "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> news:%23Ceuq7LfEHA.396@TK2MSFTNGP12.phx.gbl...
>[color=green]
>>I'm not sure.
>>
>>In this case, though, it looks like a GUID is being generated by the DB.
>>
>>Bob Lehmann
>>
>><jason@catamaranco.com> wrote in message
>>news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...
>>[color=darkred]
>>>But is that ID not dependent on being retrieved iniitally from the user
>>>machines cookie?
>>>
>>>If cookies are disabled this ID would not be retrievable for later use[/color][/color]
>
> on
>[color=green][color=darkred]
>>>the server?
>>>
>>>"Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
>>>news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl. ..
>>>
>>>>The id (107-0357560-1728507) is appended to the url, and then checked,
>>>>usually, against a value in a DB to keep track of the user.
>>>>
>>>>Bob Lehmann
>>>>
>>>><jason@catamaranco.com> wrote in message
>>>>news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl.. .
>>>>
>>>>>I must be stupid, but I am picking up contradictions on how cookies[/color]
>>
>>are
>>[color=darkred]
>>>>used
>>>>
>>>>>in sites. This dude says of Amazon:
>>>>>
>>>>>Statement: "Amazon.com passes this test when it comes to the site[/color]
>>
>>being
>>[color=darkred]
>>>>100%
>>>>
>>>>>usable if one were to manually disable and delete cookies"
>>>>>
>>>>[/color][/color]
> http://www.stickyminds.com/sitewide....ObjectType=ART
>[color=green][color=darkred]
>>>>>He then says: . I was able to use all major aspects of the
>>>
>>>site-searching,
>>>
>>>>>shopping cart, checkout functions-even though cookies were[/color][/color]
>
> completely
>[color=green][color=darkred]
>>>>>disabled.
>>>>>
>>>>>His conclusion:
>>>>>
>>>>>It appears that state maintenance was being taken care of[/color][/color]
>
> server-side,
>[color=green][color=darkred]
>>>>based
>>>>
>>>>>on the session ID at the end of the home page URL. For example, I[/color]
>>
>>chose
>>[color=darkred]
>>>>the
>>>>
>>>>>Yamaha CD-ROM kit on the amazon home page and added it to my[/color][/color]
>
> shopping
>[color=green][color=darkred]
>>>>cart.
>>>>
>>>>>The shopping cart page URL was
>>>>>http://www.amazon.com/./one-click-th...357560-1728507.
>>>
>>>Changing
>>>
>>>>>the rightmost digit from 7 to 8, and posting this edited URL, lost[/color][/color]
>
> my
>[color=green][color=darkred]
>>>>>shopping cart and brought up the following error page, lending[/color][/color]
>
> further
>[color=green][color=darkred]
>>>>>support to the probability of server-side state maintenance with a
>>>
>>>session
>>>
>>>>>ID in the URL.
>>>>>
>>>>>My Question:
>>>>>
>>>>>How can 'state' be preserved on the server via a session ID if[/color][/color]
>
> COOKIES
>[color=green][color=darkred]
>>>ARE
>>>
>>>>>DISABLED and DELETEd....
>>>>>
>>>>>I thought if the user disabled cookies that blew if for Session
>>>>
>>>>Variables...
>>>>
>>>>>Could someone please tell me what I am missing here?
>>>>>
>>>>>Thanks
>>>>>
>>>>>Jason
>>>>>
>>>>><jason@catamaranco.com> wrote in message
>>>>>news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl.. .
>>>>>
>>>>>>Is it possible for a user to enable permanent cookies but disable
>>>>
>>>>session
>>>>
>>>>>>cookies.....this seems like a contradition yet this is what I[/color][/color]
>
> appear
>[color=green][color=darkred]
>>>to
>>>
>>>>be
>>>>
>>>>>>reading in online articles?
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>[/color]
>>[/color]
>
>[/color]

Guest
 
Posts: n/a
#9: Jul 19 '05

re: Cookies - Is this possible?


Thanks for the advice - I appreciate it...

I now see what you were getting at....this is almost like starting a
'transcation' for a user based on db id to follow him around the site if
cookies are not enabled....

Just one question....I know that sql server does have a unique identifier
field...is this what is triggering the number or does the target page
activate an insert and then recall
the number for appendment on the url....

I wish I had seen this idea in my mind...I assumed from what I had read
online that cookies or cookie degradation was the only way...

I had also read Aaron's shopping car solution a while back but I though the
javascript could be an issue etc.....

ps: I find the wrox books okay but they usually have a lot of errors which
can also be a hinderance...

Thanks
Jason




"Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
news:ulUlCwMfEHA.2916@TK2MSFTNGP12.phx.gbl...[color=blue]
> It's not impossible. And, I don't think you understand what is going on
> there.
>
> This is what happens when a site chooses not to rely on cookies or[/color]
sessions[color=blue]
> for tracking users....
>
> 1. User enters site
> 2. A unique ID is assigned to the user, usually from a DB generated unique
> ID
> 3. The unique id is stored in a DB
> 4. The unique ID is appended to *all* URLs to track the user, and passed
> from page to page in the URL
> 5. If the unique ID is needed on a page, it is looked up in the DB and[/color]
used[color=blue]
> as a key in the DB for whatever transaction took place
>
> You are making this cookies / no cookies problem way more difficult than[/color]
it[color=blue]
> needs to be.
>
> You need to come up with some Use / Business Cases to determine if the no
> cookie problem is really a problem to begin with. If no cookies will
> severely impact your application, then code a solution that doesn't rely[/color]
on[color=blue]
> cookies. Don't add complexity developing 2 solutions to the problem
>
> If there is bearable risk in not supporting the no-cookie folks, then[/color]
direct[color=blue]
> them to page that informs that accepting cookies are required, and let[/color]
them[color=blue]
> decide.
>
> I'm not trying to be critical - You are obviously working very hard to do
> whatever it is you are doing. But, you are lacking some fundamentals that
> are causing you to go down paths trying to finding solutions to problems
> that don't exist.
>
> I suggest reading some basic literature on server-side programming and[/color]
ASP.[color=blue]
>
> Also, read this...[/color]
[color=blue]
>
> Bob Lehmann
>
>
> <jason@catamaranco.com> wrote in message
> news:uuiIS%23LfEHA.3916@TK2MSFTNGP11.phx.gbl...[color=green]
> > You see, this cannot be possible, as his example is based on returning[/color][/color]
to[color=blue][color=green]
> > the home page of Amazon after he has disabled cookies...thus it is not
> > possible for the browser to know who he is unless it was pulling:
> >
> > 1. Cookie (but disabled, so impossible)
> > 2. IP (But they would never do this method due to dynamic dhcp and aol[/color]
> user[color=green]
> > implications of same ip)
> >
> > Thus, something is screwed up with his explanation.
> >
> > - Jason
> >
> >
> > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > news:%23Ceuq7LfEHA.396@TK2MSFTNGP12.phx.gbl...[color=darkred]
> > > I'm not sure.
> > >
> > > In this case, though, it looks like a GUID is being generated by the[/color][/color][/color]
DB.[color=blue][color=green][color=darkred]
> > >
> > > Bob Lehmann
> > >
> > > <jason@catamaranco.com> wrote in message
> > > news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...
> > > > But is that ID not dependent on being retrieved iniitally from the[/color][/color]
> user[color=green][color=darkred]
> > > > machines cookie?
> > > >
> > > > If cookies are disabled this ID would not be retrievable for later[/color][/color][/color]
use[color=blue][color=green]
> > on[color=darkred]
> > > > the server?
> > > >
> > > > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > > > news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...
> > > > > The id (107-0357560-1728507) is appended to the url, and then[/color][/color]
> checked,[color=green][color=darkred]
> > > > > usually, against a value in a DB to keep track of the user.
> > > > >
> > > > > Bob Lehmann
> > > > >
> > > > > <jason@catamaranco.com> wrote in message
> > > > > news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...
> > > > > > I must be stupid, but I am picking up contradictions on how[/color][/color]
> cookies[color=green][color=darkred]
> > > are
> > > > > used
> > > > > > in sites. This dude says of Amazon:
> > > > > >
> > > > > > Statement: "Amazon.com passes this test when it comes to the[/color][/color][/color]
site[color=blue][color=green][color=darkred]
> > > being
> > > > > 100%
> > > > > > usable if one were to manually disable and delete cookies"
> > > > > >
> > > > >
> > > >
> > >[/color]
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green][color=darkred]
> > > > > > He then says: . I was able to use all major aspects of the
> > > > site-searching,
> > > > > > shopping cart, checkout functions-even though cookies were[/color]
> > completely[color=darkred]
> > > > > > disabled.
> > > > > >
> > > > > > His conclusion:
> > > > > >
> > > > > > It appears that state maintenance was being taken care of[/color]
> > server-side,[color=darkred]
> > > > > based
> > > > > > on the session ID at the end of the home page URL. For example,[/color][/color][/color]
I[color=blue][color=green][color=darkred]
> > > chose
> > > > > the
> > > > > > Yamaha CD-ROM kit on the amazon home page and added it to my[/color]
> > shopping[color=darkred]
> > > > > cart.
> > > > > > The shopping cart page URL was
> > > > > >[/color][/color][/color]
http://www.amazon.com/./one-click-th...357560-1728507.[color=blue][color=green][color=darkred]
> > > > Changing
> > > > > > the rightmost digit from 7 to 8, and posting this edited URL,[/color][/color][/color]
lost[color=blue][color=green]
> > my[color=darkred]
> > > > > > shopping cart and brought up the following error page, lending[/color]
> > further[color=darkred]
> > > > > > support to the probability of server-side state maintenance with[/color][/color][/color]
a[color=blue][color=green][color=darkred]
> > > > session
> > > > > > ID in the URL.
> > > > > >
> > > > > > My Question:
> > > > > >
> > > > > > How can 'state' be preserved on the server via a session ID if[/color]
> > COOKIES[color=darkred]
> > > > ARE
> > > > > > DISABLED and DELETEd....
> > > > > >
> > > > > > I thought if the user disabled cookies that blew if for Session
> > > > > Variables...
> > > > > >
> > > > > > Could someone please tell me what I am missing here?
> > > > > >
> > > > > > Thanks
> > > > > >
> > > > > > Jason
> > > > > >
> > > > > > <jason@catamaranco.com> wrote in message
> > > > > > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...
> > > > > > > Is it possible for a user to enable permanent cookies but[/color][/color]
> disable[color=green][color=darkred]
> > > > > session
> > > > > > > cookies.....this seems like a contradition yet this is what I[/color]
> > appear[color=darkred]
> > > > to
> > > > > be
> > > > > > > reading in online articles?
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


Bob Lehmann
Guest
 
Posts: n/a
#10: Jul 19 '05

re: Cookies - Is this possible?


The scheme will vary on how the number is actually generated. Look in db.asp
from Aaron's cart. It has one way of generating the id.

Bob Lehmann

<jason@catamaranco.com> wrote in message
news:erW2MCNfEHA.140@TK2MSFTNGP12.phx.gbl...[color=blue]
> Thanks for the advice - I appreciate it...
>
> I now see what you were getting at....this is almost like starting a
> 'transcation' for a user based on db id to follow him around the site if
> cookies are not enabled....
>
> Just one question....I know that sql server does have a unique identifier
> field...is this what is triggering the number or does the target page
> activate an insert and then recall
> the number for appendment on the url....
>
> I wish I had seen this idea in my mind...I assumed from what I had read
> online that cookies or cookie degradation was the only way...
>
> I had also read Aaron's shopping car solution a while back but I though[/color]
the[color=blue]
> javascript could be an issue etc.....
>
> ps: I find the wrox books okay but they usually have a lot of errors which
> can also be a hinderance...
>
> Thanks
> Jason
>
>
>
>
> "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> news:ulUlCwMfEHA.2916@TK2MSFTNGP12.phx.gbl...[color=green]
> > It's not impossible. And, I don't think you understand what is going on
> > there.
> >
> > This is what happens when a site chooses not to rely on cookies or[/color]
> sessions[color=green]
> > for tracking users....
> >
> > 1. User enters site
> > 2. A unique ID is assigned to the user, usually from a DB generated[/color][/color]
unique[color=blue][color=green]
> > ID
> > 3. The unique id is stored in a DB
> > 4. The unique ID is appended to *all* URLs to track the user, and passed
> > from page to page in the URL
> > 5. If the unique ID is needed on a page, it is looked up in the DB and[/color]
> used[color=green]
> > as a key in the DB for whatever transaction took place
> >
> > You are making this cookies / no cookies problem way more difficult than[/color]
> it[color=green]
> > needs to be.
> >
> > You need to come up with some Use / Business Cases to determine if the[/color][/color]
no[color=blue][color=green]
> > cookie problem is really a problem to begin with. If no cookies will
> > severely impact your application, then code a solution that doesn't rely[/color]
> on[color=green]
> > cookies. Don't add complexity developing 2 solutions to the problem
> >
> > If there is bearable risk in not supporting the no-cookie folks, then[/color]
> direct[color=green]
> > them to page that informs that accepting cookies are required, and let[/color]
> them[color=green]
> > decide.
> >
> > I'm not trying to be critical - You are obviously working very hard to[/color][/color]
do[color=blue][color=green]
> > whatever it is you are doing. But, you are lacking some fundamentals[/color][/color]
that[color=blue][color=green]
> > are causing you to go down paths trying to finding solutions to problems
> > that don't exist.
> >
> > I suggest reading some basic literature on server-side programming and[/color]
> ASP.[color=green]
> >
> > Also, read this...[/color]
>[color=green]
> >
> > Bob Lehmann
> >
> >
> > <jason@catamaranco.com> wrote in message
> > news:uuiIS%23LfEHA.3916@TK2MSFTNGP11.phx.gbl...[color=darkred]
> > > You see, this cannot be possible, as his example is based on returning[/color][/color]
> to[color=green][color=darkred]
> > > the home page of Amazon after he has disabled cookies...thus it is not
> > > possible for the browser to know who he is unless it was pulling:
> > >
> > > 1. Cookie (but disabled, so impossible)
> > > 2. IP (But they would never do this method due to dynamic dhcp and aol[/color]
> > user[color=darkred]
> > > implications of same ip)
> > >
> > > Thus, something is screwed up with his explanation.
> > >
> > > - Jason
> > >
> > >
> > > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > > news:%23Ceuq7LfEHA.396@TK2MSFTNGP12.phx.gbl...
> > > > I'm not sure.
> > > >
> > > > In this case, though, it looks like a GUID is being generated by the[/color][/color]
> DB.[color=green][color=darkred]
> > > >
> > > > Bob Lehmann
> > > >
> > > > <jason@catamaranco.com> wrote in message
> > > > news:Ou72vSLfEHA.3292@TK2MSFTNGP10.phx.gbl...
> > > > > But is that ID not dependent on being retrieved iniitally from the[/color]
> > user[color=darkred]
> > > > > machines cookie?
> > > > >
> > > > > If cookies are disabled this ID would not be retrievable for later[/color][/color]
> use[color=green][color=darkred]
> > > on
> > > > > the server?
> > > > >
> > > > > "Bob Lehmann" <nospam@dontbotherme.zzz> wrote in message
> > > > > news:%23px55DLfEHA.3348@TK2MSFTNGP12.phx.gbl...
> > > > > > The id (107-0357560-1728507) is appended to the url, and then[/color]
> > checked,[color=darkred]
> > > > > > usually, against a value in a DB to keep track of the user.
> > > > > >
> > > > > > Bob Lehmann
> > > > > >
> > > > > > <jason@catamaranco.com> wrote in message
> > > > > > news:%23MxF0gJfEHA.3412@TK2MSFTNGP11.phx.gbl...
> > > > > > > I must be stupid, but I am picking up contradictions on how[/color]
> > cookies[color=darkred]
> > > > are
> > > > > > used
> > > > > > > in sites. This dude says of Amazon:
> > > > > > >
> > > > > > > Statement: "Amazon.com passes this test when it comes to the[/color][/color]
> site[color=green][color=darkred]
> > > > being
> > > > > > 100%
> > > > > > > usable if one were to manually disable and delete cookies"
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >[/color]
> >[/color]
>[/color]
http://www.stickyminds.com/sitewide....ObjectType=ART[color=blue][color=green][color=darkred]
> > > > > > > He then says: . I was able to use all major aspects of the
> > > > > site-searching,
> > > > > > > shopping cart, checkout functions-even though cookies were
> > > completely
> > > > > > > disabled.
> > > > > > >
> > > > > > > His conclusion:
> > > > > > >
> > > > > > > It appears that state maintenance was being taken care of
> > > server-side,
> > > > > > based
> > > > > > > on the session ID at the end of the home page URL. For[/color][/color][/color]
example,[color=blue]
> I[color=green][color=darkred]
> > > > chose
> > > > > > the
> > > > > > > Yamaha CD-ROM kit on the amazon home page and added it to my
> > > shopping
> > > > > > cart.
> > > > > > > The shopping cart page URL was
> > > > > > >[/color][/color]
> http://www.amazon.com/./one-click-th...357560-1728507.[color=green][color=darkred]
> > > > > Changing
> > > > > > > the rightmost digit from 7 to 8, and posting this edited URL,[/color][/color]
> lost[color=green][color=darkred]
> > > my
> > > > > > > shopping cart and brought up the following error page, lending
> > > further
> > > > > > > support to the probability of server-side state maintenance[/color][/color][/color]
with[color=blue]
> a[color=green][color=darkred]
> > > > > session
> > > > > > > ID in the URL.
> > > > > > >
> > > > > > > My Question:
> > > > > > >
> > > > > > > How can 'state' be preserved on the server via a session ID if
> > > COOKIES
> > > > > ARE
> > > > > > > DISABLED and DELETEd....
> > > > > > >
> > > > > > > I thought if the user disabled cookies that blew if for[/color][/color][/color]
Session[color=blue][color=green][color=darkred]
> > > > > > Variables...
> > > > > > >
> > > > > > > Could someone please tell me what I am missing here?
> > > > > > >
> > > > > > > Thanks
> > > > > > >
> > > > > > > Jason
> > > > > > >
> > > > > > > <jason@catamaranco.com> wrote in message
> > > > > > > news:Ob$i7aJfEHA.592@TK2MSFTNGP11.phx.gbl...
> > > > > > > > Is it possible for a user to enable permanent cookies but[/color]
> > disable[color=darkred]
> > > > > > session
> > > > > > > > cookies.....this seems like a contradition yet this is what[/color][/color][/color]
I[color=blue][color=green][color=darkred]
> > > appear
> > > > > to
> > > > > > be
> > > > > > > > reading in online articles?
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >[/color]
> >
> >[/color]
>
>[/color]


Closed Thread